healer

General

Target

f7f1d198063b150f09913215b062e3ffa364933838fde3df93fb3f08505c04c2
Size

1.7MB
Sample

250418-3h6mns1k15
MD5

f4832c8baa05e73704856e2e56ca0e87
SHA1

3ee4acd453fdd5240203ce8e7f17fb34803609bf
SHA256

f7f1d198063b150f09913215b062e3ffa364933838fde3df93fb3f08505c04c2
SHA512

d4389602b67b9f501914d81e3b8c098e51110eee1b0f569508d8d3a228c204acc1b2b8eda721ea986414a00e82c7115eea276e91c543d0b9fb52b6f92ff27e88
SSDEEP

49152:mOE3DvLVtzAwNj50bY7w+D7rQ55XDo6m2:HcjLVtzVj50bYckMrXtm2

Score

10^/10

Malware Config

Targets

- Target
  
  f7f1d198063b150f09913215b062e3ffa364933838fde3df93fb3f08505c04c2
- Size
  
  1.7MB
- MD5
  
  f4832c8baa05e73704856e2e56ca0e87
- SHA1
  
  3ee4acd453fdd5240203ce8e7f17fb34803609bf
- SHA256
  
  f7f1d198063b150f09913215b062e3ffa364933838fde3df93fb3f08505c04c2
- SHA512
  
  d4389602b67b9f501914d81e3b8c098e51110eee1b0f569508d8d3a228c204acc1b2b8eda721ea986414a00e82c7115eea276e91c543d0b9fb52b6f92ff27e88
- SSDEEP
  
  49152:mOE3DvLVtzAwNj50bY7w+D7rQ55XDo6m2:HcjLVtzVj50bYckMrXtm2
Score

10^/10

healer defense_evasion discovery dropper evasion trojan
- Detects Healer an antivirus disabler dropper
- Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Healer family
  healer
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Modifies Windows Defender TamperProtection settings
  evasion trojan
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  defense_evasion
- Windows security modification
  defense_evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2