General

  • Target

    5c19f035a8f974e7fe304299ba4030426bb3e28a05258ece3318bbe68c6c4366.exe

  • Size

    322KB

  • Sample

    241111-pdnpeasnbk

  • MD5

    4a320a63184c1a2d726d9a549ff99a10

  • SHA1

    abd2b734e9af0d5ebc34edccbd49474595fe313e

  • SHA256

    5c19f035a8f974e7fe304299ba4030426bb3e28a05258ece3318bbe68c6c4366

  • SHA512

    be91f5a478567838b1a2ed1de4ff2a40d7d0bdabe88a9c0740f9b32fe049f2d65a5c5b09555097929e3e8f1e8dc3026e6720acaa8550c9df164f6c57a9932124

  • SSDEEP

    6144:KQy+bnr+fp0yN90QERA1kBzhwgje/Xf7J2bhVquy3L+vWnNtJ:gMrPy90pBzugjKT/usL+vWn/J

Malware Config

Targets

    • Target

      5c19f035a8f974e7fe304299ba4030426bb3e28a05258ece3318bbe68c6c4366.exe

    • Size

      322KB

    • MD5

      4a320a63184c1a2d726d9a549ff99a10

    • SHA1

      abd2b734e9af0d5ebc34edccbd49474595fe313e

    • SHA256

      5c19f035a8f974e7fe304299ba4030426bb3e28a05258ece3318bbe68c6c4366

    • SHA512

      be91f5a478567838b1a2ed1de4ff2a40d7d0bdabe88a9c0740f9b32fe049f2d65a5c5b09555097929e3e8f1e8dc3026e6720acaa8550c9df164f6c57a9932124

    • SSDEEP

      6144:KQy+bnr+fp0yN90QERA1kBzhwgje/Xf7J2bhVquy3L+vWnNtJ:gMrPy90pBzugjKT/usL+vWn/J

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks