Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f533d32642996431aa47d2b811b9bd246f1c268c102c1a29f7bed939a2d23a3c
-
Size
1.4MB
-
Sample
231003-zv6awshd98
-
MD5
f763c34a2681920ba522c88c3e983b6f
-
SHA1
96fb2fb7718bad220e9905b36a055befc21bcd5d
-
SHA256
f533d32642996431aa47d2b811b9bd246f1c268c102c1a29f7bed939a2d23a3c
-
SHA512
56997e3779715562b942df9dc36d37a7da5b55f83b6517ad456a7459be63d3f6380e30ae1315190120816732f3edadabda1210a931acdbab7f67d29a76854ad3
-
SSDEEP
24576:Cyr2dGBW85JZlgAT0Tcb0MVibedjYYr5YkwnyVOBOBZPNz6dim6tBq5512:pGGBWMJvLTscoMVibepr5Y3yVO0rPN5C
Static task
static1
Behavioral task
behavioral1
Sample
f533d32642996431aa47d2b811b9bd246f1c268c102c1a29f7bed939a2d23a3c.exe
Resource
win10-20230915-en
Malware Config
Targets
-
-
Target
f533d32642996431aa47d2b811b9bd246f1c268c102c1a29f7bed939a2d23a3c
-
Size
1.4MB
-
MD5
f763c34a2681920ba522c88c3e983b6f
-
SHA1
96fb2fb7718bad220e9905b36a055befc21bcd5d
-
SHA256
f533d32642996431aa47d2b811b9bd246f1c268c102c1a29f7bed939a2d23a3c
-
SHA512
56997e3779715562b942df9dc36d37a7da5b55f83b6517ad456a7459be63d3f6380e30ae1315190120816732f3edadabda1210a931acdbab7f67d29a76854ad3
-
SSDEEP
24576:Cyr2dGBW85JZlgAT0Tcb0MVibedjYYr5YkwnyVOBOBZPNz6dim6tBq5512:pGGBWMJvLTscoMVibepr5Y3yVO0rPN5C
Score10/10-
Detects Healer an antivirus disabler dropper
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1