General

  • Target

    ed03ccb439e3ac9f78514b4ecdc6f7037bf5d450210f7db61463ce47c74ea326N

  • Size

    321KB

  • Sample

    241112-nnjyja1jhw

  • MD5

    550c51b7367074395a24c22166f7fd80

  • SHA1

    ba3bd41d9cfd9de753a1a39a5c37a578ad5d3bc0

  • SHA256

    ed03ccb439e3ac9f78514b4ecdc6f7037bf5d450210f7db61463ce47c74ea326

  • SHA512

    923f3e3acb204e11ee98a847f28a0954a4e9b87f721eeac1f398be5445fc391a3791c82bac0c75ba02b2addde372700b57eb9e3ff369ebc4cfa2256b99eb56ad

  • SSDEEP

    6144:KAy+bnr+np0yN90QEW5Aj/H8GoqHAVBLb/EdYihneH8UWTgGh8:sMrzy904WvHqhb/ihnecUWTgX

Malware Config

Targets

    • Target

      ed03ccb439e3ac9f78514b4ecdc6f7037bf5d450210f7db61463ce47c74ea326N

    • Size

      321KB

    • MD5

      550c51b7367074395a24c22166f7fd80

    • SHA1

      ba3bd41d9cfd9de753a1a39a5c37a578ad5d3bc0

    • SHA256

      ed03ccb439e3ac9f78514b4ecdc6f7037bf5d450210f7db61463ce47c74ea326

    • SHA512

      923f3e3acb204e11ee98a847f28a0954a4e9b87f721eeac1f398be5445fc391a3791c82bac0c75ba02b2addde372700b57eb9e3ff369ebc4cfa2256b99eb56ad

    • SSDEEP

      6144:KAy+bnr+np0yN90QEW5Aj/H8GoqHAVBLb/EdYihneH8UWTgGh8:sMrzy904WvHqhb/ihnecUWTgX

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks