Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296

  • Size

    1.5MB

  • Sample

    230714-fj8r4ada9v

  • MD5

    ad5990ceb2f9e176f5bce809abb7d322

  • SHA1

    7d78f0a6a235cac3e34035f9668bcf0e77bd9d79

  • SHA256

    b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296

  • SHA512

    04518bf2dc2b7896b4356b57d1fd29dbb163ebc959d643a4aac22996e771e65f3eb3c8765e851bd6ce435d7bf1bfa0273a2b243c3c29df415d1bb8d619ed4ea4

  • SSDEEP

    49152:5RAKiSCEXDlvYM+yP1Ib8uY+4YSPSXpTrQp:vAbEKM3VPEqp

Malware Config

Targets

    • Target

      b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296

    • Size

      1.5MB

    • MD5

      ad5990ceb2f9e176f5bce809abb7d322

    • SHA1

      7d78f0a6a235cac3e34035f9668bcf0e77bd9d79

    • SHA256

      b6f47a3bfae2340cb43155de36a42fdf174c4a78c018a6d13951812247cf4296

    • SHA512

      04518bf2dc2b7896b4356b57d1fd29dbb163ebc959d643a4aac22996e771e65f3eb3c8765e851bd6ce435d7bf1bfa0273a2b243c3c29df415d1bb8d619ed4ea4

    • SSDEEP

      49152:5RAKiSCEXDlvYM+yP1Ib8uY+4YSPSXpTrQp:vAbEKM3VPEqp

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks