General

  • Target

    mkpub_part_g.zip

  • Size

    452KB

  • MD5

    d287ef3ca5bc3faad4f6dd38c1378a40

  • SHA1

    5eb9337b868ba9cad3e313b59e3230c2ebc0532b

  • SHA256

    eb25522b7a2bcab8b44846ec951e80e308d32bb166bf01d06ed05c34b51db68a

  • SHA512

    948e337781466f02785ff0f08f34ea8ba2bf648d18f7585441a622ea16637a2d97fe38ab321ad466d059cfc5b586e3f3898ee19cbe629b2f174d8faf482d7b71

  • SSDEEP

    12288:VtjvWPLd5iUVVS05sG3IraRhSLGUVRaKYK:V5vEaaiG4ravRUVRaK

Score
10/10

Malware Config

Signatures

  • Detects Healer an antivirus disabler dropper 1 IoCs
  • Healer family
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • mkpub_part_g.zip
    .zip

    Password: infected

  • d6086904aa3c47a04f9651cad2d2d4be3d50ae93b4bbc5b5b7bd63dc86eb2ec6.bin
    .dll windows:6 windows x64

    Password: infected

    e8385dfe7f786490db1860559fcd6c74


    Headers

    Imports

    Exports

    Sections

  • e4d31acd4f6f9a8c85c0c7d946d55e4efd5a2571f54a3b6682e04495f951bd96.bin
    .exe windows:4 windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • eb1a060a2f31ff324b171aa329f0302493bf6d8a573c1142f03b7267fb2a362d.bin
    .exe windows:5 windows x86

    Password: infected

    f707ada0aac189999ec6eb4a5a71dfbc


    Headers

    Imports

    Sections

  • f6147edac0f3bf98bf8360176358fe4b4eeeca097325a501dcd32916b60fbe28.bin
    .exe windows:6 windows x64

    Password: infected

    ff082fef3d15cdd142534440e54d6a28


    Headers

    Imports

    Sections