healer | 783ec0c1ed54f90dfe9d5558696eb4483fe8db9eca906622556f16d32975613a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

783ec0c1ed54f90dfe9d5558696eb4483fe8db9eca906622556f16d32975613a
Size

1.0MB
Sample

231002-p43agsah7s
MD5

f9356f72d2ffa1165180a570acae4bba
SHA1

861ec29b363b57a304ea9d6ab97433b0470713d6
SHA256

783ec0c1ed54f90dfe9d5558696eb4483fe8db9eca906622556f16d32975613a
SHA512

d07abcecba355068b768aa5df83d856a906211a015047bf6ad98ec9a02f2fdbd847f73e2061d32f49e10456e40c035d62d5daa14365e23267285af18e2d2a0f9
SSDEEP

24576:SykK+nCSDb9NG0SUcA1S7BfV18KKt5bZt1GAcE5:5kNflkdQ

Score

10^/10

healer dropper evasion persistence trojan

Malware Config

Targets

- Target
  
  783ec0c1ed54f90dfe9d5558696eb4483fe8db9eca906622556f16d32975613a
- Size
  
  1.0MB
- MD5
  
  f9356f72d2ffa1165180a570acae4bba
- SHA1
  
  861ec29b363b57a304ea9d6ab97433b0470713d6
- SHA256
  
  783ec0c1ed54f90dfe9d5558696eb4483fe8db9eca906622556f16d32975613a
- SHA512
  
  d07abcecba355068b768aa5df83d856a906211a015047bf6ad98ec9a02f2fdbd847f73e2061d32f49e10456e40c035d62d5daa14365e23267285af18e2d2a0f9
- SSDEEP
  
  24576:SykK+nCSDb9NG0SUcA1S7BfV18KKt5bZt1GAcE5:5kNflkdQ
Score

10^/10

healer dropper evasion persistence trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasionpersistencetrojan