Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    35e68e953b84487b55aeb72d5c708ee759b446ec6b03696d84accf392661a6e1

  • Size

    877KB

  • Sample

    231003-f2jwpaac86

  • MD5

    3be4bb80f9f4e60bda782c722a5080b2

  • SHA1

    de19fb38014c1547ce043dd77a33b51939f4c1bc

  • SHA256

    35e68e953b84487b55aeb72d5c708ee759b446ec6b03696d84accf392661a6e1

  • SHA512

    9eb59f427cfc0ddae3c0c0c9c72ccee25fa791dd462b70f43a79486608668b8ad62e9be9e9b7968344949fc03b809810c552148ba3b955b659cfb73cd744d7ac

  • SSDEEP

    12288:eMr9y909oQLcflvyLa7lCl4bspSV1DGGKnVNbWPkLO4IzORpFuRELzzGk5U3:ryQcfTAl4bZCGKnVNbWsC9vRm55U3

Malware Config

Targets

    • Target

      35e68e953b84487b55aeb72d5c708ee759b446ec6b03696d84accf392661a6e1

    • Size

      877KB

    • MD5

      3be4bb80f9f4e60bda782c722a5080b2

    • SHA1

      de19fb38014c1547ce043dd77a33b51939f4c1bc

    • SHA256

      35e68e953b84487b55aeb72d5c708ee759b446ec6b03696d84accf392661a6e1

    • SHA512

      9eb59f427cfc0ddae3c0c0c9c72ccee25fa791dd462b70f43a79486608668b8ad62e9be9e9b7968344949fc03b809810c552148ba3b955b659cfb73cd744d7ac

    • SSDEEP

      12288:eMr9y909oQLcflvyLa7lCl4bspSV1DGGKnVNbWPkLO4IzORpFuRELzzGk5U3:ryQcfTAl4bZCGKnVNbWsC9vRm55U3

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks