General

  • Target

    e91da56042cb38a9ddf26ae132c623d6125bf34a50628f69521006caeb3b48d8N

  • Size

    324KB

  • Sample

    241111-m3k9gaycpp

  • MD5

    453b433f66a9cae7bd2f0df8c6120680

  • SHA1

    3c1e0f8e2e1940ba4ffa04d18451ef8ac1400afe

  • SHA256

    e91da56042cb38a9ddf26ae132c623d6125bf34a50628f69521006caeb3b48d8

  • SHA512

    0f61475d0d3a5743a10eac9de04668053f217f0104ed3f9600a3eedeee9f92e1e29dc44cf982b9038517c3f5998d49e584df3d7763d930a2188cc3915cb9046a

  • SSDEEP

    6144:K+y+bnr+7p0yN90QEE1AN5QRJArYGdehQDuz+IQgiIaw:+Mr3y90y1NAKhQDVbgKw

Malware Config

Targets

    • Target

      e91da56042cb38a9ddf26ae132c623d6125bf34a50628f69521006caeb3b48d8N

    • Size

      324KB

    • MD5

      453b433f66a9cae7bd2f0df8c6120680

    • SHA1

      3c1e0f8e2e1940ba4ffa04d18451ef8ac1400afe

    • SHA256

      e91da56042cb38a9ddf26ae132c623d6125bf34a50628f69521006caeb3b48d8

    • SHA512

      0f61475d0d3a5743a10eac9de04668053f217f0104ed3f9600a3eedeee9f92e1e29dc44cf982b9038517c3f5998d49e584df3d7763d930a2188cc3915cb9046a

    • SSDEEP

      6144:K+y+bnr+7p0yN90QEE1AN5QRJArYGdehQDuz+IQgiIaw:+Mr3y90y1NAKhQDVbgKw

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks