healer | a9d8cbd520e82812f363be1c8ba35faadf7f4787922dd88abba982e2c288dcd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9d8cbd520e82812f363be1c8ba35faadf7f4787922dd88abba982e2c288dcd2
Size

146KB
Sample

230717-sypzrach59
MD5

592102b9a721df3b95342a817040fe7e
SHA1

42d6c6b3d000a61cfd2aa9e4a4608f8977df5c60
SHA256

a9d8cbd520e82812f363be1c8ba35faadf7f4787922dd88abba982e2c288dcd2
SHA512

81183806189b4e1ce41e25b16777122a03cf2780d196ad8c33737ecffd2c46d1adce55f6625239a75b16a5eb7b5657758a84c45a1971624e3b6870a8dd4fd05d
SSDEEP

3072:kRd4OO9in4uzz7wjiR6ZwelYpK2+rlELZBLXfHXW:WdRO3pjiRCwz8+rPXW

Score

10^/10

healer dropper evasion trojan

Malware Config

Targets

- Target
  
  a9d8cbd520e82812f363be1c8ba35faadf7f4787922dd88abba982e2c288dcd2
- Size
  
  146KB
- MD5
  
  592102b9a721df3b95342a817040fe7e
- SHA1
  
  42d6c6b3d000a61cfd2aa9e4a4608f8977df5c60
- SHA256
  
  a9d8cbd520e82812f363be1c8ba35faadf7f4787922dd88abba982e2c288dcd2
- SHA512
  
  81183806189b4e1ce41e25b16777122a03cf2780d196ad8c33737ecffd2c46d1adce55f6625239a75b16a5eb7b5657758a84c45a1971624e3b6870a8dd4fd05d
- SSDEEP
  
  3072:kRd4OO9in4uzz7wjiR6ZwelYpK2+rlELZBLXfHXW:WdRO3pjiRCwz8+rPXW
Score

10^/10

healer dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasiontrojan