General

  • Target
    2026-03-29_0c9efe61601a3d1b5143da35c52140cd_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee
  • Size 688KB
  • Sample260329-d2j6cads9v
  • SHA256 7a68cf889617d8bea05f8a594c0d747cf5594aa3d7a5a0dc7332b9f1681f4505
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-03-29_0c9efe61601a3d1b5143da35c52140cd_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee
    • Size 688KB
    • SHA256 7a68cf889617d8bea05f8a594c0d747cf5594aa3d7a5a0dc7332b9f1681f4505
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender Real-time Protection settings

    • Modifies Windows Defender TamperProtection settings

    • Modifies Windows Defender notification settings

    • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Windows security modification

MITRE ATT&CK Enterprise v16

Tasks