healer | 76fcef737fa9976de752a06cda34679224678b4aca89b537b79cf86fedd98dd5 | Triage™

Login
Reports

Overview

overview

Static

static

3

76fcef737f...d5.exe

windows7-x64

76fcef737f...d5.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
76fcef737fa9976de752a06cda34679224678b4aca89b537b79cf86fedd98dd5
Size 240KB
Sample241109-3j8testmgw
SHA256 76fcef737fa9976de752a06cda34679224678b4aca89b537b79cf86fedd98dd5
MD5 a1abde09ee93208263d898dccc30ecd2
SHA1 70da2e97dfc6e840138c781909f8124ca2790d22
SHA512 464cc9c4c3d2bf0fe29fa6beb8b0280994024aa49a83330ca7d5ea7172ee362347f77d8f86e6d62218758decd063185ea76d4b06de6f8d10d286529420a4549b
SSDEEP 6144:J2bih8qvAB5URsNeTtveqIHJE57jiqZu:Ib28qvKUCNeTtvX57ji0
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

healer discovery dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

76fcef737fa9976de752a06cda34679224678b4aca89b537b79cf86fedd98dd5.exe

Resource

win7-20241023-en

windows7-x64

8 signatures

150 seconds

healer discovery dropper evasion trojan

Behavioral task

behavioral2

Sample

76fcef737fa9976de752a06cda34679224678b4aca89b537b79cf86fedd98dd5.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

healer discovery dropper evasion trojan

Malware Config

Targets

- Target
  76fcef737fa9976de752a06cda34679224678b4aca89b537b79cf86fedd98dd5
- Size 240KB
- SHA256 76fcef737fa9976de752a06cda34679224678b4aca89b537b79cf86fedd98dd5
- MD5 a1abde09ee93208263d898dccc30ecd2
- SHA1 70da2e97dfc6e840138c781909f8124ca2790d22
- SHA512 464cc9c4c3d2bf0fe29fa6beb8b0280994024aa49a83330ca7d5ea7172ee362347f77d8f86e6d62218758decd063185ea76d4b06de6f8d10d286529420a4549b
- SSDEEP 6144:J2bih8qvAB5URsNeTtveqIHJE57jiqZu:Ib28qvKUCNeTtvX57ji0
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

healer discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdiscoverydropperevasiontrojan

behavioral2

healerdiscoverydropperevasiontrojan

© 2018-2026

Terms | Privacy