General

  • Target

    8f44203a30f0aa441594b47f2c3ec64261e1adffaad9672b9af2eff0c2b6205e

  • Size

    354KB

  • Sample

    241110-ask5havhlm

  • MD5

    91207ea5086581115a3d689f6069476e

  • SHA1

    1107474ed7bf8a149007bcf6314c96993f6122aa

  • SHA256

    8f44203a30f0aa441594b47f2c3ec64261e1adffaad9672b9af2eff0c2b6205e

  • SHA512

    e7e6f342877c6f64e79a3c7db8f4075fa817cfafebd70cbfcd9f1afb0460ad2b1647cc1abe6ee4d3a68c781f17205e94b882fba5e04e9fe3f1b65597a6a0d931

  • SSDEEP

    6144:KSy+bnr+Np0yN90QEwxWInd02gIkzSPmOWh46TEvcSruFeRTP:6Mr9y90UW++2a6BO4VsUj

Malware Config

Targets

    • Target

      8f44203a30f0aa441594b47f2c3ec64261e1adffaad9672b9af2eff0c2b6205e

    • Size

      354KB

    • MD5

      91207ea5086581115a3d689f6069476e

    • SHA1

      1107474ed7bf8a149007bcf6314c96993f6122aa

    • SHA256

      8f44203a30f0aa441594b47f2c3ec64261e1adffaad9672b9af2eff0c2b6205e

    • SHA512

      e7e6f342877c6f64e79a3c7db8f4075fa817cfafebd70cbfcd9f1afb0460ad2b1647cc1abe6ee4d3a68c781f17205e94b882fba5e04e9fe3f1b65597a6a0d931

    • SSDEEP

      6144:KSy+bnr+Np0yN90QEwxWInd02gIkzSPmOWh46TEvcSruFeRTP:6Mr9y90UW++2a6BO4VsUj

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks