healer | 58cc41efca883719be909563107040375c248e27c4599847877cc4a5ca3e3df1 | Triage™

Login
Reports

Overview

overview

Static

static

3

58cc41efca...f1.exe

windows7-x64

58cc41efca...f1.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
58cc41efca883719be909563107040375c248e27c4599847877cc4a5ca3e3df1
Size 181KB
Sample241109-2fh8xstepd
SHA256 58cc41efca883719be909563107040375c248e27c4599847877cc4a5ca3e3df1
MD5 e3cb9de6080a0a4ca6748e4380975c4d
SHA1 50247fdd5b56d750e8f8f6062fcd8fb19bb59c23
SHA512 45da004607cd433ea21062907143f48e730b8b7170e9db13684df84da6a83478add35abed9dd72da060561d8985543d1aba6993cca4ccf44a8886041cfd8dc0a
SSDEEP 3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

healer discovery dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

58cc41efca883719be909563107040375c248e27c4599847877cc4a5ca3e3df1.exe

Resource

win7-20240903-en

windows7-x64

8 signatures

150 seconds

healer discovery dropper evasion trojan

Behavioral task

behavioral2

Sample

58cc41efca883719be909563107040375c248e27c4599847877cc4a5ca3e3df1.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

150 seconds

healer discovery dropper evasion trojan

Malware Config

Targets

- Target
  58cc41efca883719be909563107040375c248e27c4599847877cc4a5ca3e3df1
- Size 181KB
- SHA256 58cc41efca883719be909563107040375c248e27c4599847877cc4a5ca3e3df1
- MD5 e3cb9de6080a0a4ca6748e4380975c4d
- SHA1 50247fdd5b56d750e8f8f6062fcd8fb19bb59c23
- SHA512 45da004607cd433ea21062907143f48e730b8b7170e9db13684df84da6a83478add35abed9dd72da060561d8985543d1aba6993cca4ccf44a8886041cfd8dc0a
- SSDEEP 3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

healer discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdiscoverydropperevasiontrojan

behavioral2

healerdiscoverydropperevasiontrojan

© 2018-2026

Terms | Privacy