healer | 9c851d10fcf5bfd8cf97510f808b480230a5ea6b3e5f067c43bdbd250545d1c1 | Triage

Submit
Reports

Overview

overview

Static

static

3

ca97e4024a...cs.exe

windows7-x64

ca97e4024a...cs.exe

windows10-2004-x64

Sharing

General

Target

ca97e4024afb0fb861940d71a71082e0_NeikiAnalytics
Size

178KB
Sample

240514-rvwgpabb92
MD5

ca97e4024afb0fb861940d71a71082e0
SHA1

589b32f01a3df15fe8d138ee468c82cdb289744d
SHA256

9c851d10fcf5bfd8cf97510f808b480230a5ea6b3e5f067c43bdbd250545d1c1
SHA512

0af5227f0ed6c67a638357486fa96584c880e703c7fbad282a5179ac1a6fb8273a99c31630b4732b3539716c77812295ea493b66df152fc2231a64607bcd4ce8
SSDEEP

3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues

Score

10^/10

healer dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ca97e4024afb0fb861940d71a71082e0_NeikiAnalytics.exe

Resource

win7-20240220-en

healer dropper evasion trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

ca97e4024afb0fb861940d71a71082e0_NeikiAnalytics.exe

Resource

win10v2004-20240508-en

healer dropper evasion trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  ca97e4024afb0fb861940d71a71082e0_NeikiAnalytics
- Size
  
  178KB
- MD5
  
  ca97e4024afb0fb861940d71a71082e0
- SHA1
  
  589b32f01a3df15fe8d138ee468c82cdb289744d
- SHA256
  
  9c851d10fcf5bfd8cf97510f808b480230a5ea6b3e5f067c43bdbd250545d1c1
- SHA512
  
  0af5227f0ed6c67a638357486fa96584c880e703c7fbad282a5179ac1a6fb8273a99c31630b4732b3539716c77812295ea493b66df152fc2231a64607bcd4ce8
- SSDEEP
  
  3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues
Score

10^/10

healer dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasiontrojan

behavioral2

healerdropperevasiontrojan

© 2018-2024

Terms | Privacy