healer | 45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c | Triage™

Login
Reports

Overview

overview

Static

static

3

45dd17c0bd...8c.exe

windows7-x64

45dd17c0bd...8c.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c
Size 345KB
Sample241112-1jffrssbkr
SHA256 45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c
MD5 b5d29a4ba533aabd0d2ca8c1dd3aa0c7
SHA1 a4ffd3c0908da6e5ea1ab0ec866a21b00c474efd
SHA512 411ddae89ee00aededfd6d46ce07ac152926071b8523e0ba936e16469fab0179ad8760c06df00bbcf3fb3bcf7f262fe325f0c1b2b380a09e526f1cc7676e2e93
SSDEEP 3072:x1FqmW/I9n3ohoIPYhAwUrGmowVY9gPaD/S3i4ZdD57oMwX5Rr7DT+uilh0+k:TiAuqPhAwUCmow0dD6y4ZdDKMkPcG+
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

healer discovery dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c.exe

Resource

win7-20241010-en

windows7-x64

8 signatures

150 seconds

healer discovery dropper evasion trojan

Behavioral task

behavioral2

Sample

45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

healer discovery dropper evasion trojan

Malware Config

Targets

- Target
  45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c
- Size 345KB
- SHA256 45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c
- MD5 b5d29a4ba533aabd0d2ca8c1dd3aa0c7
- SHA1 a4ffd3c0908da6e5ea1ab0ec866a21b00c474efd
- SHA512 411ddae89ee00aededfd6d46ce07ac152926071b8523e0ba936e16469fab0179ad8760c06df00bbcf3fb3bcf7f262fe325f0c1b2b380a09e526f1cc7676e2e93
- SSDEEP 3072:x1FqmW/I9n3ohoIPYhAwUrGmowVY9gPaD/S3i4ZdD57oMwX5Rr7DT+uilh0+k:TiAuqPhAwUCmow0dD6y4ZdDKMkPcG+
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

healer discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdiscoverydropperevasiontrojan

behavioral2

healerdiscoverydropperevasiontrojan

© 2018-2026

Terms | Privacy