General

  • Target

    49c41daa304b09f7f159813bd6ccb16d1f0f83848073a3a699bba28177ddf623N

  • Size

    258KB

  • Sample

    241112-zk5xdatqgj

  • MD5

    9cc2b3aa587c3cf3ac28b20dd1c35ef0

  • SHA1

    0577273a7ef795008ee5b88087e2a5b14a534940

  • SHA256

    49c41daa304b09f7f159813bd6ccb16d1f0f83848073a3a699bba28177ddf623

  • SHA512

    460eb9df7008001ef3f09329ff7f5e68580933ba7d1cf47571cbe3d868147372b14fda7ae09089d4015eb818288a11bc3e8725fa09be1d45829c4405bf410074

  • SSDEEP

    3072:ZdoDTDFlyuomYKvcyAVcpm5mynFjkiWPXTlQCKbmJ+WyQ2ZKgqVx5yM:aTDFl2yZm8yFwiWLiBa+WytZ+VG

Malware Config

Targets

    • Target

      49c41daa304b09f7f159813bd6ccb16d1f0f83848073a3a699bba28177ddf623N

    • Size

      258KB

    • MD5

      9cc2b3aa587c3cf3ac28b20dd1c35ef0

    • SHA1

      0577273a7ef795008ee5b88087e2a5b14a534940

    • SHA256

      49c41daa304b09f7f159813bd6ccb16d1f0f83848073a3a699bba28177ddf623

    • SHA512

      460eb9df7008001ef3f09329ff7f5e68580933ba7d1cf47571cbe3d868147372b14fda7ae09089d4015eb818288a11bc3e8725fa09be1d45829c4405bf410074

    • SSDEEP

      3072:ZdoDTDFlyuomYKvcyAVcpm5mynFjkiWPXTlQCKbmJ+WyQ2ZKgqVx5yM:aTDFl2yZm8yFwiWLiBa+WytZ+VG

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • Windows security modification

MITRE ATT&CK Enterprise v15

Tasks