healer | b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

dridex

windows10-1703-x64

Sharing

General

Target

b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296
Size

1.5MB
Sample

230714-fj8r4ada9v
MD5

ad5990ceb2f9e176f5bce809abb7d322
SHA1

7d78f0a6a235cac3e34035f9668bcf0e77bd9d79
SHA256

b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296
SHA512

04518bf2dc2b7896b4356b57d1fd29dbb163ebc959d643a4aac22996e771e65f3eb3c8765e851bd6ce435d7bf1bfa0273a2b243c3c29df415d1bb8d619ed4ea4
SSDEEP

49152:5RAKiSCEXDlvYM+yP1Ib8uY+4YSPSXpTrQp:vAbEKM3VPEqp

Score

10^/10

healer dropper evasion persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296.exe

Resource

win10-20230703-en

healer dropper evasion persistence trojan

windows10-1703-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296
- Size
  
  1.5MB
- MD5
  
  ad5990ceb2f9e176f5bce809abb7d322
- SHA1
  
  7d78f0a6a235cac3e34035f9668bcf0e77bd9d79
- SHA256
  
  b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296
- SHA512
  
  04518bf2dc2b7896b4356b57d1fd29dbb163ebc959d643a4aac22996e771e65f3eb3c8765e851bd6ce435d7bf1bfa0273a2b243c3c29df415d1bb8d619ed4ea4
- SSDEEP
  
  49152:5RAKiSCEXDlvYM+yP1Ib8uY+4YSPSXpTrQp:vAbEKM3VPEqp
Score

10^/10

healer dropper evasion persistence trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasionpersistencetrojan

© 2018-2025

Terms | Privacy