healer | 0fcb74c81aba859b155329895f2e8485ead4404ac9ccc8e182da55d8702abe02 | Triage

Submit
Reports

Overview

overview

Static

static

a4326138.exe

windows7-x64

a4326138.exe

windows10-2004-x64

Sharing

General

Target

a4326138.exe
Size

11KB
Sample

250127-m1w8yswmfl
MD5

52be802c6b06a586dc2e8a4fccc6d075
SHA1

76904ad8f17c83d0cc1233407540b6b331ba0284
SHA256

0fcb74c81aba859b155329895f2e8485ead4404ac9ccc8e182da55d8702abe02
SHA512

152413ee88e7f0cce9b7f1b163bfd9ceb78b3c14041a3cea1a5fac9e9408f17cc3b9f1e49b6b817b24b91faa3626ee4a03fd35ee8bbef55d79599fc191098959
SSDEEP

96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score

10^/10

healer defense_evasion dropper evasion trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

a4326138.exe

Resource

win7-20240903-en

healer defense_evasion dropper evasion trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

a4326138.exe

Resource

win10v2004-20241007-en

healer defense_evasion dropper evasion trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  a4326138.exe
- Size
  
  11KB
- MD5
  
  52be802c6b06a586dc2e8a4fccc6d075
- SHA1
  
  76904ad8f17c83d0cc1233407540b6b331ba0284
- SHA256
  
  0fcb74c81aba859b155329895f2e8485ead4404ac9ccc8e182da55d8702abe02
- SHA512
  
  152413ee88e7f0cce9b7f1b163bfd9ceb78b3c14041a3cea1a5fac9e9408f17cc3b9f1e49b6b817b24b91faa3626ee4a03fd35ee8bbef55d79599fc191098959
- SSDEEP
  
  96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp
Score

10^/10

healer defense_evasion dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Modifies Windows Defender TamperProtection settings
  evasion trojan
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Windows security modification
  defense_evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

healerdefense_evasiondropperevasiontrojan

behavioral2

healerdefense_evasiondropperevasiontrojan

© 2018-2025

Terms | Privacy