General

  • Target

    bd28a2f0e49492f4f6b0cf3f4e121292d094a76abc085a4411bd76b3f8973404

  • Size

    321KB

  • Sample

    241110-cmkmwsxdqe

  • MD5

    37594859373c82bd4a23a7a658425922

  • SHA1

    788930d1328260404bb8894a1a4153054536b41f

  • SHA256

    bd28a2f0e49492f4f6b0cf3f4e121292d094a76abc085a4411bd76b3f8973404

  • SHA512

    d943d9a3dff5c60bcf137da9bee5a87af34b5a06cdff2652d55941d735c2ef19312aae0e7cf9c6ccef196481e0a1c38407680c11eeab8dc2f893606711d8457a

  • SSDEEP

    6144:IpusNO1dBTxf6+F3pUsbaDzOuP8RKcvDYGN1Is:IpuWO1PTdpvby0kIzIs

Malware Config

Targets

    • Target

      bd28a2f0e49492f4f6b0cf3f4e121292d094a76abc085a4411bd76b3f8973404

    • Size

      321KB

    • MD5

      37594859373c82bd4a23a7a658425922

    • SHA1

      788930d1328260404bb8894a1a4153054536b41f

    • SHA256

      bd28a2f0e49492f4f6b0cf3f4e121292d094a76abc085a4411bd76b3f8973404

    • SHA512

      d943d9a3dff5c60bcf137da9bee5a87af34b5a06cdff2652d55941d735c2ef19312aae0e7cf9c6ccef196481e0a1c38407680c11eeab8dc2f893606711d8457a

    • SSDEEP

      6144:IpusNO1dBTxf6+F3pUsbaDzOuP8RKcvDYGN1Is:IpuWO1PTdpvby0kIzIs

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • Windows security modification

MITRE ATT&CK Enterprise v15

Tasks