Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    19422cd310419c2884cc79a1b6abfcd7816a7decaaad7.exe

  • Size

    538KB

  • Sample

    230710-lfmckshe98

  • MD5

    7cab780a8f24d381d4fa6836237983bf

  • SHA1

    2e2eb93799eb883593d9d8f910f415d8aa55bb08

  • SHA256

    19422cd310419c2884cc79a1b6abfcd7816a7decaaad7407ecaf27a209d149f0

  • SHA512

    0be2be3088ccaff19f5cd26a71025d74c8c830a77eb852d726c313bcf56dd129e01273f1d2036318fc02847240cdbdf3a0a823c1752899020ce6b5f0ff38188e

  • SSDEEP

    12288:vegHqsz47HBakwxUW2u9YhfjWP+4bOQHHhif:bKm47H3wxPFTb9g

Malware Config

Targets

    • Target

      19422cd310419c2884cc79a1b6abfcd7816a7decaaad7.exe

    • Size

      538KB

    • MD5

      7cab780a8f24d381d4fa6836237983bf

    • SHA1

      2e2eb93799eb883593d9d8f910f415d8aa55bb08

    • SHA256

      19422cd310419c2884cc79a1b6abfcd7816a7decaaad7407ecaf27a209d149f0

    • SHA512

      0be2be3088ccaff19f5cd26a71025d74c8c830a77eb852d726c313bcf56dd129e01273f1d2036318fc02847240cdbdf3a0a823c1752899020ce6b5f0ff38188e

    • SSDEEP

      12288:vegHqsz47HBakwxUW2u9YhfjWP+4bOQHHhif:bKm47H3wxPFTb9g

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

MITRE ATT&CK Enterprise v6

Tasks