Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    g9393798.exe

  • Size

    12KB

  • Sample

    230823-ebba7ahe58

  • MD5

    fbda9b85e2668389b72cd9e6d26241cb

  • SHA1

    462baaa0e1cc65f9fdbaacdc21bd31f0e0b89d01

  • SHA256

    e60f98a2a6cceb8290203825b5b2dd12327600de243afb18c123ca0412478d9c

  • SHA512

    781f825d954348fc0046c8820160281ac6d1b0cb0f8fc711e7b37529dbb8664ac8cfb8ee0008f8959ad4baa18ae1264706d7f349da4547f70e23e60585eba725

  • SSDEEP

    96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Malware Config

Targets

    • Target

      g9393798.exe

    • Size

      12KB

    • MD5

      fbda9b85e2668389b72cd9e6d26241cb

    • SHA1

      462baaa0e1cc65f9fdbaacdc21bd31f0e0b89d01

    • SHA256

      e60f98a2a6cceb8290203825b5b2dd12327600de243afb18c123ca0412478d9c

    • SHA512

      781f825d954348fc0046c8820160281ac6d1b0cb0f8fc711e7b37529dbb8664ac8cfb8ee0008f8959ad4baa18ae1264706d7f349da4547f70e23e60585eba725

    • SSDEEP

      96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Windows security modification

MITRE ATT&CK Enterprise v15

Tasks