General
-
Target
05c61467734c5bccaa3632c14912d61458c033b9ccbca3921de2736d2571a81bN.exe
-
Size
414KB
-
Sample
241112-rsj1waxnhj
-
MD5
8668117096fb0ffe7d4049a34855e750
-
SHA1
057f8611fe90469e00636784660aab5cb6858cdc
-
SHA256
05c61467734c5bccaa3632c14912d61458c033b9ccbca3921de2736d2571a81b
-
SHA512
a008d9591739633bd25998474e2cc27946e75cae9b6398dd3e9cb4955bf6cc8c82eb2c9b0e396aea9362ce1aa98efd2fe3fb66134fb08c565a75c28fd14046de
-
SSDEEP
6144:+Ep0yN90QE1rt8fS7LT1iXm3PixKo9f9smH4kO4vArockNBKLI1:4y90XtLJP0F5JRzKLI1
Static task
static1
Malware Config
Targets
-
-
Target
05c61467734c5bccaa3632c14912d61458c033b9ccbca3921de2736d2571a81bN.exe
-
Size
414KB
-
MD5
8668117096fb0ffe7d4049a34855e750
-
SHA1
057f8611fe90469e00636784660aab5cb6858cdc
-
SHA256
05c61467734c5bccaa3632c14912d61458c033b9ccbca3921de2736d2571a81b
-
SHA512
a008d9591739633bd25998474e2cc27946e75cae9b6398dd3e9cb4955bf6cc8c82eb2c9b0e396aea9362ce1aa98efd2fe3fb66134fb08c565a75c28fd14046de
-
SSDEEP
6144:+Ep0yN90QE1rt8fS7LT1iXm3PixKo9f9smH4kO4vArockNBKLI1:4y90XtLJP0F5JRzKLI1
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1