healer | 3251ac2ae3197963c837e828b9270b0cfcfdb15c27fb500d7334f46cc6e365fc | Triage

Sharing

General

Target

9b07bf8a80cb3967b46a4635969e9410_NeikiAnalytics.exe
Size

107KB
Sample

240603-ep385aag7z
MD5

9b07bf8a80cb3967b46a4635969e9410
SHA1

c643fa8c11bbb4d70eae4b09f30b730c355f3156
SHA256

3251ac2ae3197963c837e828b9270b0cfcfdb15c27fb500d7334f46cc6e365fc
SHA512

f387767ecfca520c411858a2ef7fa0ba9405d6008d040d56069a8dc98912efcc6037d46516c82ea70a101e25ee84fac33b080a9b90764e2325a04763ea81415d
SSDEEP

1536:ct3tN5szKPxlZNGaktkspa1SKrS7yFjQvNcLpMWR98PxPQWRm6fPxYx:yEe9NGh+bqyFsFcLpMWR9sx4WRm6nxQ

Score

10^/10

healer dropper evasion trojan

Malware Config

Targets

- Target
  
  9b07bf8a80cb3967b46a4635969e9410_NeikiAnalytics.exe
- Size
  
  107KB
- MD5
  
  9b07bf8a80cb3967b46a4635969e9410
- SHA1
  
  c643fa8c11bbb4d70eae4b09f30b730c355f3156
- SHA256
  
  3251ac2ae3197963c837e828b9270b0cfcfdb15c27fb500d7334f46cc6e365fc
- SHA512
  
  f387767ecfca520c411858a2ef7fa0ba9405d6008d040d56069a8dc98912efcc6037d46516c82ea70a101e25ee84fac33b080a9b90764e2325a04763ea81415d
- SSDEEP
  
  1536:ct3tN5szKPxlZNGaktkspa1SKrS7yFjQvNcLpMWR98PxPQWRm6fPxYx:yEe9NGh+bqyFsFcLpMWR9sx4WRm6nxQ
Score

10^/10

healer dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdropperevasiontrojan

behavioral2

healerdropperevasiontrojan