healer | f3718d1af681cb3c8684e4c9297ebcd7c75aa54638535ebdd2f7e79e118ca793 | Triage

Submit
Reports

Overview

overview

Static

static

3

f3718d1af6...3N.exe

windows7-x64

f3718d1af6...3N.exe

windows10-2004-x64

Sharing

General

Target

f3718d1af681cb3c8684e4c9297ebcd7c75aa54638535ebdd2f7e79e118ca793N.exe
Size

277KB
Sample

241119-mcp5qsvepk
MD5

8ae5733e859af3fc70bd24f291241cc0
SHA1

58d339fd37f6875ad18c3830c08ced6afd4b3691
SHA256

f3718d1af681cb3c8684e4c9297ebcd7c75aa54638535ebdd2f7e79e118ca793
SHA512

3becbd1bda5d969e3025e4a3588b678920bacb9c08731cb68d7b115f2f6e5d2a2773812f5bfe62944ff42aa577b58c269b7960a20c2c69d87d022a6ab8d67089
SSDEEP

3072:EA+sgUHniUYJ+vYaFpYpE86BSkuIo2RX+SnsK+MEANDlN6qOncZuH5/vJwYPDpJc:rBM+vJ8NHIpz5pDQOupv2YPDWJ

Score

10^/10

healer discovery dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f3718d1af681cb3c8684e4c9297ebcd7c75aa54638535ebdd2f7e79e118ca793N.exe

Resource

win7-20241010-en

healer discovery dropper evasion trojan

windows7-x64

8 signatures

120 seconds

Behavioral task

behavioral2

Sample

f3718d1af681cb3c8684e4c9297ebcd7c75aa54638535ebdd2f7e79e118ca793N.exe

Resource

win10v2004-20241007-en

healer discovery dropper evasion trojan

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  f3718d1af681cb3c8684e4c9297ebcd7c75aa54638535ebdd2f7e79e118ca793N.exe
- Size
  
  277KB
- MD5
  
  8ae5733e859af3fc70bd24f291241cc0
- SHA1
  
  58d339fd37f6875ad18c3830c08ced6afd4b3691
- SHA256
  
  f3718d1af681cb3c8684e4c9297ebcd7c75aa54638535ebdd2f7e79e118ca793
- SHA512
  
  3becbd1bda5d969e3025e4a3588b678920bacb9c08731cb68d7b115f2f6e5d2a2773812f5bfe62944ff42aa577b58c269b7960a20c2c69d87d022a6ab8d67089
- SSDEEP
  
  3072:EA+sgUHniUYJ+vYaFpYpE86BSkuIo2RX+SnsK+MEANDlN6qOncZuH5/vJwYPDpJc:rBM+vJ8NHIpz5pDQOupv2YPDWJ
Score

10^/10

healer discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdiscoverydropperevasiontrojan

behavioral2

healerdiscoverydropperevasiontrojan

© 2018-2025

Terms | Privacy