Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bc2079426d4f3ba141d3f110836f76c53a0cfbf411f7dc997bc9d14445652dcb

  • Size

    563KB

  • Sample

    241104-rq56bs1gkr

  • MD5

    d5b00140a0726523d54ddc1d069827a6

  • SHA1

    d6bd3e77e38500d53adf8a9bf3e55b0ad9707632

  • SHA256

    bc2079426d4f3ba141d3f110836f76c53a0cfbf411f7dc997bc9d14445652dcb

  • SHA512

    641f892c85dec57bcba1119b4500f0f27a87bda7242dbe7f0cbe516e07353fe96ec74aa2ff313de8076c5fb71438e11a16be702a82e924ed01bd655adb5c14c7

  • SSDEEP

    12288:ty90O+Xi63IXz294vCfI2qzL0eB/nMfszqQMWIFAW:tyZ+8zUYsCoeB/M1dWsAW

Malware Config

Targets

    • Target

      bc2079426d4f3ba141d3f110836f76c53a0cfbf411f7dc997bc9d14445652dcb

    • Size

      563KB

    • MD5

      d5b00140a0726523d54ddc1d069827a6

    • SHA1

      d6bd3e77e38500d53adf8a9bf3e55b0ad9707632

    • SHA256

      bc2079426d4f3ba141d3f110836f76c53a0cfbf411f7dc997bc9d14445652dcb

    • SHA512

      641f892c85dec57bcba1119b4500f0f27a87bda7242dbe7f0cbe516e07353fe96ec74aa2ff313de8076c5fb71438e11a16be702a82e924ed01bd655adb5c14c7

    • SSDEEP

      12288:ty90O+Xi63IXz294vCfI2qzL0eB/nMfszqQMWIFAW:tyZ+8zUYsCoeB/M1dWsAW

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks