healer | e60f98a2a6cceb8290203825b5b2dd12327600de243afb18c123ca0412478d9c | Triage

Sharing

General

Target

g9393798.exe
Size

12KB
Sample

230823-ebba7ahe58
MD5

fbda9b85e2668389b72cd9e6d26241cb
SHA1

462baaa0e1cc65f9fdbaacdc21bd31f0e0b89d01
SHA256

e60f98a2a6cceb8290203825b5b2dd12327600de243afb18c123ca0412478d9c
SHA512

781f825d954348fc0046c8820160281ac6d1b0cb0f8fc711e7b37529dbb8664ac8cfb8ee0008f8959ad4baa18ae1264706d7f349da4547f70e23e60585eba725
SSDEEP

96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score

10^/10

healer dropper evasion trojan

Malware Config

Targets

- Target
  
  g9393798.exe
- Size
  
  12KB
- MD5
  
  fbda9b85e2668389b72cd9e6d26241cb
- SHA1
  
  462baaa0e1cc65f9fdbaacdc21bd31f0e0b89d01
- SHA256
  
  e60f98a2a6cceb8290203825b5b2dd12327600de243afb18c123ca0412478d9c
- SHA512
  
  781f825d954348fc0046c8820160281ac6d1b0cb0f8fc711e7b37529dbb8664ac8cfb8ee0008f8959ad4baa18ae1264706d7f349da4547f70e23e60585eba725
- SSDEEP
  
  96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp
Score

10^/10

healer dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasiontrojan

behavioral2

healerdropperevasiontrojan