Overview

overview

10

Static

static

3

32b4960fc0...cd.exe

windows7-x64

10

32b4960fc0...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32b4960fc0149d34a1352a9fd2cdd3bdc88691908644fa477646817617ceb6cd

  • Size

    403KB

  • Sample

    240527-jqpvcach9w

  • MD5

    587836f85c22ef84c73ab53f38fdfadc

  • SHA1

    ace7921fbf7745a7698a957fcbf0177c80a3fac8

  • SHA256

    32b4960fc0149d34a1352a9fd2cdd3bdc88691908644fa477646817617ceb6cd

  • SHA512

    fe0f06bc7db5b5c005d2815f5fcd599708f257c7f669f1f3edb51dc0a3ba031396961eb3768c5c5f31139845d74ce0d7071a3a209a3e08f57855bf69f0e1f5a5

  • SSDEEP

    6144:4VaWw7kqYDOfOwABVIiXSAn1em15X9gIieE0bbtbt:4VaX7LYKfNAMiXqAtgyEqbt

Score
10/10
healerdropperevasiontrojan

Malware Config

Targets

    • Target

      32b4960fc0149d34a1352a9fd2cdd3bdc88691908644fa477646817617ceb6cd

    • Size

      403KB

    • MD5

      587836f85c22ef84c73ab53f38fdfadc

    • SHA1

      ace7921fbf7745a7698a957fcbf0177c80a3fac8

    • SHA256

      32b4960fc0149d34a1352a9fd2cdd3bdc88691908644fa477646817617ceb6cd

    • SHA512

      fe0f06bc7db5b5c005d2815f5fcd599708f257c7f669f1f3edb51dc0a3ba031396961eb3768c5c5f31139845d74ce0d7071a3a209a3e08f57855bf69f0e1f5a5

    • SSDEEP

      6144:4VaWw7kqYDOfOwABVIiXSAn1em15X9gIieE0bbtbt:4VaX7LYKfNAMiXqAtgyEqbt

    Score
    10/10
    healerdropperevasiontrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Windows security modification

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Privilege Escalation

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Defense Evasion

Modify Registry

2
T1112

Impair Defenses

2
T1562

Disable or Modify Tools

2
T1562.001

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks