healer

General

Target

b1d6588dcdb60fe1b745b8217fc21f7db58eefa3b722d59ff9117f03a0eb6c96
Size

1.7MB
Sample

250125-d7dkratpbt
MD5

f4c68fe1986509c60afe63858d68d6e3
SHA1

c5e3bfbf055ca762f1c9b95e3988cfd0c20fcb72
SHA256

b1d6588dcdb60fe1b745b8217fc21f7db58eefa3b722d59ff9117f03a0eb6c96
SHA512

811f84757db19552cbfbbde7689a85cf64f46ba67289b66657fe423fd9f622d43e65a60f2474c88b9774edcc24c8da853dcbdb101ddf16c673b22fb47994c2ad
SSDEEP

49152:gWP2MaKRCcmBmgNHN0ThW9sA94ya395sp4IRj:gWP2+OBmwz1a924A

Score

10^/10

Malware Config

Targets

- Target
  
  b1d6588dcdb60fe1b745b8217fc21f7db58eefa3b722d59ff9117f03a0eb6c96
- Size
  
  1.7MB
- MD5
  
  f4c68fe1986509c60afe63858d68d6e3
- SHA1
  
  c5e3bfbf055ca762f1c9b95e3988cfd0c20fcb72
- SHA256
  
  b1d6588dcdb60fe1b745b8217fc21f7db58eefa3b722d59ff9117f03a0eb6c96
- SHA512
  
  811f84757db19552cbfbbde7689a85cf64f46ba67289b66657fe423fd9f622d43e65a60f2474c88b9774edcc24c8da853dcbdb101ddf16c673b22fb47994c2ad
- SSDEEP
  
  49152:gWP2MaKRCcmBmgNHN0ThW9sA94ya395sp4IRj:gWP2+OBmwz1a924A
Score

10^/10

healer defense_evasion discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Modifies Windows Defender TamperProtection settings
  evasion trojan
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  defense_evasion
- Windows security modification
  defense_evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2