Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    y6836522.exe

  • Size

    863KB

  • Sample

    230711-3zq9babb73

  • MD5

    b6892af7074185fcf0259e7c20f8616e

  • SHA1

    f76448c4fb6bdd7427ce40ef0eec1937b4514734

  • SHA256

    f6fc3d5332537df9f31ed5f91fda53a6cc2d08ca69958b4f9982f20398365c80

  • SHA512

    a414e0e23a1c31501d9d73850aa5a04d0be0f488a3a76d6b3cbc72a8a554191422ddc3436d5b389224f9d78bf66cafc044ca53b480a4ac36038042f4a725d5df

  • SSDEEP

    12288:gMr5y90alkBjdp9sU3ojZ8Gf5jb6eoYcD8eMxswF4IDAg1UZYyGlaqFF/xFEFHrZ:pyRkBjdnx3+jRP68tF49YsaTE/

Malware Config

Targets

    • Target

      y6836522.exe

    • Size

      863KB

    • MD5

      b6892af7074185fcf0259e7c20f8616e

    • SHA1

      f76448c4fb6bdd7427ce40ef0eec1937b4514734

    • SHA256

      f6fc3d5332537df9f31ed5f91fda53a6cc2d08ca69958b4f9982f20398365c80

    • SHA512

      a414e0e23a1c31501d9d73850aa5a04d0be0f488a3a76d6b3cbc72a8a554191422ddc3436d5b389224f9d78bf66cafc044ca53b480a4ac36038042f4a725d5df

    • SSDEEP

      12288:gMr5y90alkBjdp9sU3ojZ8Gf5jb6eoYcD8eMxswF4IDAg1UZYyGlaqFF/xFEFHrZ:pyRkBjdnx3+jRP68tF49YsaTE/

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks