healer | 75a69c1d4835bc2023aa10b26c205e7e8c8e1eb32ea45a07be53ea548588a4e5 | Triage

Submit
Reports

Overview

overview

Static

static

3

75a69c1d48...5N.exe

windows7-x64

75a69c1d48...5N.exe

windows10-2004-x64

Sharing

General

Target

75a69c1d4835bc2023aa10b26c205e7e8c8e1eb32ea45a07be53ea548588a4e5N.exe
Size

290KB
Sample

241119-n3wwmswfmp
MD5

b2daf9211864adfce0cb7155b3d63da0
SHA1

8812f0508d4e7a0a0745b2d72f04113ece5b70a1
SHA256

75a69c1d4835bc2023aa10b26c205e7e8c8e1eb32ea45a07be53ea548588a4e5
SHA512

fed72acd11763ddc50088ad000ea8c8f1caa004eac793e1a664383751856c3d12a2dc74ab668a558e8a77328f5ed8c2d4d224f59886d363ed65da386f5782310
SSDEEP

6144:7eW4bLFYh3MgISaxenPn0sRakduR4biNZil6e4UA:7e9hYhZa+P0WV83SlVA

Score

10^/10

healer discovery dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

75a69c1d4835bc2023aa10b26c205e7e8c8e1eb32ea45a07be53ea548588a4e5N.exe

Resource

win7-20240903-en

healer discovery dropper evasion trojan

windows7-x64

8 signatures

120 seconds

Behavioral task

behavioral2

Sample

75a69c1d4835bc2023aa10b26c205e7e8c8e1eb32ea45a07be53ea548588a4e5N.exe

Resource

win10v2004-20241007-en

healer discovery dropper evasion trojan

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  75a69c1d4835bc2023aa10b26c205e7e8c8e1eb32ea45a07be53ea548588a4e5N.exe
- Size
  
  290KB
- MD5
  
  b2daf9211864adfce0cb7155b3d63da0
- SHA1
  
  8812f0508d4e7a0a0745b2d72f04113ece5b70a1
- SHA256
  
  75a69c1d4835bc2023aa10b26c205e7e8c8e1eb32ea45a07be53ea548588a4e5
- SHA512
  
  fed72acd11763ddc50088ad000ea8c8f1caa004eac793e1a664383751856c3d12a2dc74ab668a558e8a77328f5ed8c2d4d224f59886d363ed65da386f5782310
- SSDEEP
  
  6144:7eW4bLFYh3MgISaxenPn0sRakduR4biNZil6e4UA:7e9hYhZa+P0WV83SlVA
Score

10^/10

healer discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdiscoverydropperevasiontrojan

behavioral2

healerdiscoverydropperevasiontrojan

© 2018-2025

Terms | Privacy