healer | 1796479f0330ae4f9001463e7bf80b9b5f0b4593152af84f73df02bab6371cbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1796479f0330ae4f9001463e7bf80b9b5f0b4593152af84f73df02bab6371cbe
Size

705KB
Sample

230922-3clejscg65
MD5

03385175a929d005854699bb80be1d9e
SHA1

b908713483094d6e1a085522688564d04f95ef34
SHA256

1796479f0330ae4f9001463e7bf80b9b5f0b4593152af84f73df02bab6371cbe
SHA512

e0975997be6e0a3a09b9fe5f7ea9efa178fa8b29f60174cc69681424a8bcfdecccb5e0d66de0a9182c919d9aafc503384f111da94d292c12cf039d3a21daaa69
SSDEEP

12288:HMrNy90brITXe/Ecb23h0oE8Jr0epoTm680UWapmGUf/5cc:myaoe/J23jEsr0YoT/80/QDUfj

Score

10^/10

healer dropper evasion persistence trojan

Malware Config

Targets

- Target
  
  1796479f0330ae4f9001463e7bf80b9b5f0b4593152af84f73df02bab6371cbe
- Size
  
  705KB
- MD5
  
  03385175a929d005854699bb80be1d9e
- SHA1
  
  b908713483094d6e1a085522688564d04f95ef34
- SHA256
  
  1796479f0330ae4f9001463e7bf80b9b5f0b4593152af84f73df02bab6371cbe
- SHA512
  
  e0975997be6e0a3a09b9fe5f7ea9efa178fa8b29f60174cc69681424a8bcfdecccb5e0d66de0a9182c919d9aafc503384f111da94d292c12cf039d3a21daaa69
- SSDEEP
  
  12288:HMrNy90brITXe/Ecb23h0oE8Jr0epoTm680UWapmGUf/5cc:myaoe/J23jEsr0YoT/80/QDUfj
Score

10^/10

healer dropper evasion persistence trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasionpersistencetrojan