General

  • Target

    449628f905291e85696f68fd16041b00_NeikiAnalytics

  • Size

    175KB

  • Sample

    240509-qmnansee69

  • MD5

    449628f905291e85696f68fd16041b00

  • SHA1

    a62f18f694007575e262d9051bc6f60c03c375ff

  • SHA256

    b1f2328bcdaadf57c9984b4557ec0c115e9c9905274c38b32ed4040ffef24f5f

  • SHA512

    f87182a4f4ecb546f496c9e0955cb298c0c710495cd496a16ff637af3b90b807438b67e9289fc2b2da6987ed81bc8faa626e95392bd3381cf13c0b58bb090849

  • SSDEEP

    3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues

Malware Config

Targets

    • Target

      449628f905291e85696f68fd16041b00_NeikiAnalytics

    • Size

      175KB

    • MD5

      449628f905291e85696f68fd16041b00

    • SHA1

      a62f18f694007575e262d9051bc6f60c03c375ff

    • SHA256

      b1f2328bcdaadf57c9984b4557ec0c115e9c9905274c38b32ed4040ffef24f5f

    • SHA512

      f87182a4f4ecb546f496c9e0955cb298c0c710495cd496a16ff637af3b90b807438b67e9289fc2b2da6987ed81bc8faa626e95392bd3381cf13c0b58bb090849

    • SSDEEP

      3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Windows security modification

MITRE ATT&CK Enterprise v15

Tasks