healer | 799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2 | Triage™

Login
Reports

Overview

overview

Static

static

3

799e696bf7...f2.exe

windows7-x64

799e696bf7...f2.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2
Size 333KB
Sample241109-3pykmstnet
SHA256 799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2
MD5 920948a8f0b1841bc21961b458a8cfb7
SHA1 08d5b94cdcb0b3e846d621e64d75fff48007868c
SHA512 aeb74dddeb976bfbac59c8c5daa083cba1935f868c740bce12f435d901a991ae040008da50d7a95eb231c3ead342ec5db5d5511f8e46db7ae712748e74b81d0f
SSDEEP 6144:yZ3LYwHUxsB2a9D4lJERA0Cr4x+WBQYLwzAW0nr:yZ38wHU2BsCi0R+Weowar
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

healer discovery dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2.exe

Resource

win7-20241023-en

windows7-x64

8 signatures

150 seconds

healer discovery dropper evasion trojan

Behavioral task

behavioral2

Sample

799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

healer discovery dropper evasion trojan

Malware Config

Targets

- Target
  799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2
- Size 333KB
- SHA256 799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2
- MD5 920948a8f0b1841bc21961b458a8cfb7
- SHA1 08d5b94cdcb0b3e846d621e64d75fff48007868c
- SHA512 aeb74dddeb976bfbac59c8c5daa083cba1935f868c740bce12f435d901a991ae040008da50d7a95eb231c3ead342ec5db5d5511f8e46db7ae712748e74b81d0f
- SSDEEP 6144:yZ3LYwHUxsB2a9D4lJERA0Cr4x+WBQYLwzAW0nr:yZ38wHU2BsCi0R+Weowar
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

healer discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdiscoverydropperevasiontrojan

behavioral2

healerdiscoverydropperevasiontrojan

© 2018-2026

Terms | Privacy