healer | 936b912d6856692f740cd656923c361085790bdbc3c374e17a537053a552752c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

936b912d6856692f740cd656923c361085790bdbc3c374e17a537053a552752c
Size

147KB
Sample

230720-zqw7esbb9s
MD5

cf7ed205454f480553d2c42353f3df09
SHA1

b11e4c19fc97b4ba67c65709aefda2290229aff6
SHA256

936b912d6856692f740cd656923c361085790bdbc3c374e17a537053a552752c
SHA512

44c32e0e489499ac53a31ef080bd13eefb128f682265e33ace94443c79fe5c4eb4dfd8e25a19bf9e55a64a1c0716f82e15b88d43c60ea9ca827eff6cd52ea6a1
SSDEEP

3072:KlZ3TFfpCRzzwQjiRb5welYpK23rlx4cLXfHXW:er8LjiRVwz86rPXW

Score

10^/10

healer dropper evasion trojan

Malware Config

Targets

- Target
  
  936b912d6856692f740cd656923c361085790bdbc3c374e17a537053a552752c
- Size
  
  147KB
- MD5
  
  cf7ed205454f480553d2c42353f3df09
- SHA1
  
  b11e4c19fc97b4ba67c65709aefda2290229aff6
- SHA256
  
  936b912d6856692f740cd656923c361085790bdbc3c374e17a537053a552752c
- SHA512
  
  44c32e0e489499ac53a31ef080bd13eefb128f682265e33ace94443c79fe5c4eb4dfd8e25a19bf9e55a64a1c0716f82e15b88d43c60ea9ca827eff6cd52ea6a1
- SSDEEP
  
  3072:KlZ3TFfpCRzzwQjiRb5welYpK23rlx4cLXfHXW:er8LjiRVwz86rPXW
Score

10^/10

healer dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasiontrojan