Analysis
-
max time kernel
0s -
max time network
18s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
10-05-2024 13:07
Errors
General
-
Target
795a49ee81e6eb25d2140b564c0aa63d165592e4d3b7bb4c29423c619b51334a.exe
-
Size
390KB
-
MD5
2b5197c2b3a9c14d7cb949b809a27863
-
SHA1
e78dac9c729de8b6e9064b3bb2043401063ed616
-
SHA256
795a49ee81e6eb25d2140b564c0aa63d165592e4d3b7bb4c29423c619b51334a
-
SHA512
622de70b8d20486c805cf25e5b32bc9351a28c4feca5fcde29c279761444450ca57f74a3b737a09eecf689fa909a1f89d729b528758f9a7a237dfe2511b80bbc
-
SSDEEP
6144:KXy+bnr+Op0yN90QEymQY+TOYTc28XYmEhrORHTqij+jmMrLWJeXsuIGpt:BMr6y90r1+TOSp8oNhCqij+pzXs5Mt
Malware Config
Signatures
-
Detects Healer an antivirus disabler dropper 2 IoCs
-
Healer
Healer an antivirus disabler dropper.
Processes
-
C:\Users\Admin\AppData\Local\Temp\795a49ee81e6eb25d2140b564c0aa63d165592e4d3b7bb4c29423c619b51334a.exe"C:\Users\Admin\AppData\Local\Temp\795a49ee81e6eb25d2140b564c0aa63d165592e4d3b7bb4c29423c619b51334a.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\y0932119.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\y0932119.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\k8761760.exeC:\Users\Admin\AppData\Local\Temp\IXP001.TMP\k8761760.exe3⤵
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
234KB
MD5edc556bd751be4c21331a62f7cdb4a85
SHA1a7f116072ee2b0a502ee9b5b3ad2069bfa760291
SHA256bb05c8d756e41cb57119eb061d6fe683f561205cb9729a24b65c604dd286a50d
SHA512c91080a951f2d3b89f4aac3073395ed139a692fb3b962ffda3e221bb36e55986ea7c47037d0e78ba11ae58082907dd9a452305454c953ce867f30113bcc45da1
-
Filesize
11KB
MD57e93bacbbc33e6652e147e7fe07572a0
SHA1421a7167da01c8da4dc4d5234ca3dd84e319e762
SHA256850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38
SHA512250169d7b6fcebff400be89edae8340f14130ced70c340ba9da9f225f62b52b35f6645bfb510962efb866f988688cb42392561d3e6b72194bc89d310ea43aa91
-
Filesize
8KB
-
Filesize
40KB