Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ccdf1960aaf20254d282799a321d6d2b64a0e497c8a166d10751b1b7b65f8071

  • Size

    1.1MB

  • Sample

    230922-yf3e1sbh98

  • MD5

    ce179af2d7b69dd8b917cbcc939ba471

  • SHA1

    1460f6a9cd13642832ea40d21c80ab9566cd9bd9

  • SHA256

    ccdf1960aaf20254d282799a321d6d2b64a0e497c8a166d10751b1b7b65f8071

  • SHA512

    324bbae6c8d5a67a411df165f56740f2857b7954ebbb017168c433604395022dd9a09af2fceb465e037357c5eec382865c818470b327f65a14493e75b40716f6

  • SSDEEP

    24576:ByffEcfpAkQOm7STRz5XCqAbzKoWLmlZnVRLWN:0ffEQqTSh55YkqlLRL

Malware Config

Targets

    • Target

      ccdf1960aaf20254d282799a321d6d2b64a0e497c8a166d10751b1b7b65f8071

    • Size

      1.1MB

    • MD5

      ce179af2d7b69dd8b917cbcc939ba471

    • SHA1

      1460f6a9cd13642832ea40d21c80ab9566cd9bd9

    • SHA256

      ccdf1960aaf20254d282799a321d6d2b64a0e497c8a166d10751b1b7b65f8071

    • SHA512

      324bbae6c8d5a67a411df165f56740f2857b7954ebbb017168c433604395022dd9a09af2fceb465e037357c5eec382865c818470b327f65a14493e75b40716f6

    • SSDEEP

      24576:ByffEcfpAkQOm7STRz5XCqAbzKoWLmlZnVRLWN:0ffEQqTSh55YkqlLRL

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks