General

  • Target

    e4cb9beefaeec45fdbf0a4f20fafbf38fa2babf2fdd90b605f2a2a7ba71eda8dN.exe

  • Size

    175KB

  • Sample

    241117-lkcnyawmcs

  • MD5

    85425d0986488a17c69ad68b7030ba90

  • SHA1

    09893a9af516136ef0237f2b3c6084ea626a26e5

  • SHA256

    e4cb9beefaeec45fdbf0a4f20fafbf38fa2babf2fdd90b605f2a2a7ba71eda8d

  • SHA512

    c79d1ddf1ec0904d32efc7dcc26b61b4b761616471f844d4700b1398ebe2ef8abb1207cff80189fcdc868b92fdc573bb82ff7022383a42cf5d9e91610c631728

  • SSDEEP

    3072:/DKW1LgppLRHMY0TBfJvjcTp5XDElD5PbUXukcu/9mN:/DKW1Lgbdl0TBBvjc/IlhU+kcu1

Malware Config

Targets

    • Target

      e4cb9beefaeec45fdbf0a4f20fafbf38fa2babf2fdd90b605f2a2a7ba71eda8dN.exe

    • Size

      175KB

    • MD5

      85425d0986488a17c69ad68b7030ba90

    • SHA1

      09893a9af516136ef0237f2b3c6084ea626a26e5

    • SHA256

      e4cb9beefaeec45fdbf0a4f20fafbf38fa2babf2fdd90b605f2a2a7ba71eda8d

    • SHA512

      c79d1ddf1ec0904d32efc7dcc26b61b4b761616471f844d4700b1398ebe2ef8abb1207cff80189fcdc868b92fdc573bb82ff7022383a42cf5d9e91610c631728

    • SSDEEP

      3072:/DKW1LgppLRHMY0TBfJvjcTp5XDElD5PbUXukcu/9mN:/DKW1Lgbdl0TBBvjc/IlhU+kcu1

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • Windows security modification

MITRE ATT&CK Enterprise v15

Tasks