healer | e967be50cd3ba7006de65820fb8d17c732b0458c83ae211b2b022afea0050cc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e967be50cd3ba7006de65820fb8d17c732b0458c83ae211b2b022afea0050cc5
Size

146KB
Sample

230719-jj1chahd3t
MD5

bfbd185fccd9d2d1752e367b8312ec21
SHA1

815627112a44b1ab63ab7df9acc7c852dac50652
SHA256

e967be50cd3ba7006de65820fb8d17c732b0458c83ae211b2b022afea0050cc5
SHA512

28921ad191dbd3d682eedb099f998ea7facca6ff471e8ed8afa5863a1f16a5b4d7eeb6a16a6d62f48d038cba32a54bf394af29d89efd33f27731a881d7d0e81d
SSDEEP

3072:KlZ3TFfpCRzzwQjiRb5welYpK23rlx4cLXfHXW:er8LjiRVwz86rPXW

Score

10^/10

healer dropper evasion trojan

Malware Config

Targets

- Target
  
  e967be50cd3ba7006de65820fb8d17c732b0458c83ae211b2b022afea0050cc5
- Size
  
  146KB
- MD5
  
  bfbd185fccd9d2d1752e367b8312ec21
- SHA1
  
  815627112a44b1ab63ab7df9acc7c852dac50652
- SHA256
  
  e967be50cd3ba7006de65820fb8d17c732b0458c83ae211b2b022afea0050cc5
- SHA512
  
  28921ad191dbd3d682eedb099f998ea7facca6ff471e8ed8afa5863a1f16a5b4d7eeb6a16a6d62f48d038cba32a54bf394af29d89efd33f27731a881d7d0e81d
- SSDEEP
  
  3072:KlZ3TFfpCRzzwQjiRb5welYpK23rlx4cLXfHXW:er8LjiRVwz86rPXW
Score

10^/10

healer dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasiontrojan