General

  • Target

    05c61467734c5bccaa3632c14912d61458c033b9ccbca3921de2736d2571a81bN.exe

  • Size

    414KB

  • Sample

    241112-rsj1waxnhj

  • MD5

    8668117096fb0ffe7d4049a34855e750

  • SHA1

    057f8611fe90469e00636784660aab5cb6858cdc

  • SHA256

    05c61467734c5bccaa3632c14912d61458c033b9ccbca3921de2736d2571a81b

  • SHA512

    a008d9591739633bd25998474e2cc27946e75cae9b6398dd3e9cb4955bf6cc8c82eb2c9b0e396aea9362ce1aa98efd2fe3fb66134fb08c565a75c28fd14046de

  • SSDEEP

    6144:+Ep0yN90QE1rt8fS7LT1iXm3PixKo9f9smH4kO4vArockNBKLI1:4y90XtLJP0F5JRzKLI1

Malware Config

Targets

    • Target

      05c61467734c5bccaa3632c14912d61458c033b9ccbca3921de2736d2571a81bN.exe

    • Size

      414KB

    • MD5

      8668117096fb0ffe7d4049a34855e750

    • SHA1

      057f8611fe90469e00636784660aab5cb6858cdc

    • SHA256

      05c61467734c5bccaa3632c14912d61458c033b9ccbca3921de2736d2571a81b

    • SHA512

      a008d9591739633bd25998474e2cc27946e75cae9b6398dd3e9cb4955bf6cc8c82eb2c9b0e396aea9362ce1aa98efd2fe3fb66134fb08c565a75c28fd14046de

    • SSDEEP

      6144:+Ep0yN90QE1rt8fS7LT1iXm3PixKo9f9smH4kO4vArockNBKLI1:4y90XtLJP0F5JRzKLI1

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks