Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    g8003181.exe

  • Size

    242KB

  • Sample

    230918-b1v54sgd66

  • MD5

    4db2aca858ec494990998fe2c03c1c07

  • SHA1

    2022128ff3da5a76d6b4c5aaea5d1cbae5b25660

  • SHA256

    5d7aca046c52ba7c34c49e526918b2e0e16153165a1f645713fe60480128fa17

  • SHA512

    4e819cae3fc87403f5ccd0c324e86e0c4c594591064097181eda0d158f7313803bba2acfacd9038014bb4c870b9ce53bc5fe604be11aa864b70e789982a4089b

  • SSDEEP

    3072:c2cG6IBtVVzkEmJth+9p1ORs+NJ2uvHJ5TMi473cceipyEAeAg0FujDU6fQJupkE:cwvJm09zORs+z/TMify9DAOM+Qga8/

Malware Config

Targets

    • Target

      g8003181.exe

    • Size

      242KB

    • MD5

      4db2aca858ec494990998fe2c03c1c07

    • SHA1

      2022128ff3da5a76d6b4c5aaea5d1cbae5b25660

    • SHA256

      5d7aca046c52ba7c34c49e526918b2e0e16153165a1f645713fe60480128fa17

    • SHA512

      4e819cae3fc87403f5ccd0c324e86e0c4c594591064097181eda0d158f7313803bba2acfacd9038014bb4c870b9ce53bc5fe604be11aa864b70e789982a4089b

    • SSDEEP

      3072:c2cG6IBtVVzkEmJth+9p1ORs+NJ2uvHJ5TMi473cceipyEAeAg0FujDU6fQJupkE:cwvJm09zORs+z/TMify9DAOM+Qga8/

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks