healer | 5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd | Triage™

Login
Reports

Overview

overview

Static

static

3

5f22090f07...bd.exe

windows7-x64

5f22090f07...bd.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd
Size 239KB
Sample241109-2pgrfstfpn
SHA256 5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd
MD5 816f5c3fd7d40c6b8283d0644ae4363c
SHA1 cab9d8421a8a6fe2455880ff77adcaa88e4d94a3
SHA512 6c2610f9afd099484616056d93d40e5fdbebfc3bdaf02af251571ff21e8577f238b9b358108c839e2f15e2ef83da6b07f0771a2581a6742840e5eb461dd94fe7
SSDEEP 3072:49f70CzETNW6kewfq3RVZGRRJQrt6WI5MtbYoTcLDrc4R2OYePBbJPtfRM8rkAFR:4l/eN+fq7Z0JCIKxYMoVbYeP9VnM81f
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

healer discovery dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd.exe

Resource

win7-20240903-en

windows7-x64

8 signatures

150 seconds

healer discovery dropper evasion trojan

Behavioral task

behavioral2

Sample

5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

healer discovery dropper evasion trojan

Malware Config

Targets

- Target
  5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd
- Size 239KB
- SHA256 5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd
- MD5 816f5c3fd7d40c6b8283d0644ae4363c
- SHA1 cab9d8421a8a6fe2455880ff77adcaa88e4d94a3
- SHA512 6c2610f9afd099484616056d93d40e5fdbebfc3bdaf02af251571ff21e8577f238b9b358108c839e2f15e2ef83da6b07f0771a2581a6742840e5eb461dd94fe7
- SSDEEP 3072:49f70CzETNW6kewfq3RVZGRRJQrt6WI5MtbYoTcLDrc4R2OYePBbJPtfRM8rkAFR:4l/eN+fq7Z0JCIKxYMoVbYeP9VnM81f
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

healer discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdiscoverydropperevasiontrojan

behavioral2

healerdiscoverydropperevasiontrojan

© 2018-2026

Terms | Privacy