Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6ee62187d822d8f0a8136a48874aab4b6892bf6804b5d5f294e17e9018bd0a15
-
Size
1.1MB
-
Sample
230922-tamp6aba47
-
MD5
86cce3df19d7435978f2755ba5a054f2
-
SHA1
eb78f26da3413745e1c9f5b4ce1fbdafcd2d9a6b
-
SHA256
6ee62187d822d8f0a8136a48874aab4b6892bf6804b5d5f294e17e9018bd0a15
-
SHA512
5f28506d0f012b5ef3876a80bd71ee3c3a537a3faf5b4daa4002ed90b51621af8e34f9bb0931c0d29baa17a8a4fad99b9014fbfa3211e7daaca5cbef4ed85c0d
-
SSDEEP
24576:byNf7DpKAsyjbssEXUWdQ4TYJf5WiEVs16dWQ7x:ONjYEbbvW38Jf5WfeyWQ7
Static task
static1
Behavioral task
behavioral1
Sample
6ee62187d822d8f0a8136a48874aab4b6892bf6804b5d5f294e17e9018bd0a15.exe
Resource
win10-20230831-en
Malware Config
Targets
-
-
Target
6ee62187d822d8f0a8136a48874aab4b6892bf6804b5d5f294e17e9018bd0a15
-
Size
1.1MB
-
MD5
86cce3df19d7435978f2755ba5a054f2
-
SHA1
eb78f26da3413745e1c9f5b4ce1fbdafcd2d9a6b
-
SHA256
6ee62187d822d8f0a8136a48874aab4b6892bf6804b5d5f294e17e9018bd0a15
-
SHA512
5f28506d0f012b5ef3876a80bd71ee3c3a537a3faf5b4daa4002ed90b51621af8e34f9bb0931c0d29baa17a8a4fad99b9014fbfa3211e7daaca5cbef4ed85c0d
-
SSDEEP
24576:byNf7DpKAsyjbssEXUWdQ4TYJf5WiEVs16dWQ7x:ONjYEbbvW38Jf5WfeyWQ7
Score10/10-
Detects Healer an antivirus disabler dropper
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1