healer | 80d4ed69e4ad7e0a4bfbe703c81cdf0d46a28538ef922b7f496c8695134fa8a4 | Triage

Sharing

General

Target

80d4ed69e4ad7e0a4bfbe703c81cdf0d46a28538ef922b7f496c8695134fa8a4
Size

146KB
Sample

230716-zlhs8sgf84
MD5

6b49d403860e07b84a83e47820ff01ee
SHA1

06024bedb50e9a900695ad50efeab6a720d8f4ac
SHA256

80d4ed69e4ad7e0a4bfbe703c81cdf0d46a28538ef922b7f496c8695134fa8a4
SHA512

71ca70eee9f1688bf34017cea55355ca26d1995013b90f9e6528179dddbf0e4e2158f5c62d90c7ab44f9c64850b587209193b990e9cf3728b738505a6a891c2d
SSDEEP

3072:/YMToSBzzwgjiRrJwelYpKTqrlx1ELXfHXW:lprjiRVwzcFrPXW

Score

10^/10

healer dropper evasion trojan

Malware Config

Targets

- Target
  
  80d4ed69e4ad7e0a4bfbe703c81cdf0d46a28538ef922b7f496c8695134fa8a4
- Size
  
  146KB
- MD5
  
  6b49d403860e07b84a83e47820ff01ee
- SHA1
  
  06024bedb50e9a900695ad50efeab6a720d8f4ac
- SHA256
  
  80d4ed69e4ad7e0a4bfbe703c81cdf0d46a28538ef922b7f496c8695134fa8a4
- SHA512
  
  71ca70eee9f1688bf34017cea55355ca26d1995013b90f9e6528179dddbf0e4e2158f5c62d90c7ab44f9c64850b587209193b990e9cf3728b738505a6a891c2d
- SSDEEP
  
  3072:/YMToSBzzwgjiRrJwelYpKTqrlx1ELXfHXW:lprjiRVwzcFrPXW
Score

10^/10

healer dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasiontrojan