healer | f7ba5c7fe9b1791cf1b70c18f11ec5befbdd8d81a7ca38fac618027c3f0e9f31 | Triage™

Login
Reports

Overview

overview

Static

static

5

f7ba5c7fe9...31.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
f7ba5c7fe9b1791cf1b70c18f11ec5befbdd8d81a7ca38fac618027c3f0e9f31
Size 184KB
Sample260826-peg81sv1hs
SHA256 f7ba5c7fe9b1791cf1b70c18f11ec5befbdd8d81a7ca38fac618027c3f0e9f31
MD5 d635d116d19f6e255713ed6ba92b5d12
SHA1 222840e30be5a4e0949889bf5879a59100b2bb72
SHA512 961e86237023cf291eeaabdc56616f46951ba3c9c812424f3464f9fa066bf1b76382925308356311d232c990480609221e21a61509f967cd1f9720c9a0e695fb
SSDEEP 3072:L9HqfSQ6VO47Nv9J5S70QZ/ntMM5MMF3cFFYpQr4bGzXkGzdbxI:tbQCJlJsZ/tV57FMrYtGRI
TLSH
T1AD045B1CB4AFC062DE6F6AB48CE895B18D2CB5830F214867631C472C0BB55A579B6C7F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

healer defense_evasion discovery dropper evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f7ba5c7fe9b1791cf1b70c18f11ec5befbdd8d81a7ca38fac618027c3f0e9f31.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

defense_evasion discovery dropper evasion healer trojan

Malware Config

Targets

- Target
  f7ba5c7fe9b1791cf1b70c18f11ec5befbdd8d81a7ca38fac618027c3f0e9f31
- Size 184KB
- SHA256 f7ba5c7fe9b1791cf1b70c18f11ec5befbdd8d81a7ca38fac618027c3f0e9f31
- MD5 d635d116d19f6e255713ed6ba92b5d12
- SHA1 222840e30be5a4e0949889bf5879a59100b2bb72
- SHA512 961e86237023cf291eeaabdc56616f46951ba3c9c812424f3464f9fa066bf1b76382925308356311d232c990480609221e21a61509f967cd1f9720c9a0e695fb
- SSDEEP 3072:L9HqfSQ6VO47Nv9J5S70QZ/ntMM5MMF3cFFYpQr4bGzXkGzdbxI:tbQCJlJsZ/tV57FMrYtGRI
- TLSH
  T1AD045B1CB4AFC062DE6F6AB48CE895B18D2CB5830F214867631C472C0BB55A579B6C7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery dropper evasion healer trojan
- Detects Healer an antivirus disabler dropper
- Family: Healer
  Healer an antivirus disabler dropper.
  dropper healer
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Modifies Windows Defender TamperProtection settings
  evasion trojan
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Windows security modification
  defense_evasion trojan
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverydropperevasionhealertrojan

© 2018-2026

Terms | Privacy