Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5

  • Size

    1.0MB

  • Sample

    241111-brhtesymcw

  • MD5

    6f2f60870f54677c8abc465951bfa97a

  • SHA1

    04f5e7a323d9e9ae4cace6db5f77b407ef71a938

  • SHA256

    2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5

  • SHA512

    3b94fc45c634133ccfca85553406c76b8195fe319b437c70dada905c9415bad321222763e003130dbb8e96db473fb27cf6a9e37281d984730d7b35d1aa67e5e5

  • SSDEEP

    24576:hye19Mg4rpZ0j9tE78PLy+ravKruEdCpnEqxBc2:Ue1qTrv8y78z+HEcpEp

Malware Config

Targets

    • Target

      2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5

    • Size

      1.0MB

    • MD5

      6f2f60870f54677c8abc465951bfa97a

    • SHA1

      04f5e7a323d9e9ae4cace6db5f77b407ef71a938

    • SHA256

      2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5

    • SHA512

      3b94fc45c634133ccfca85553406c76b8195fe319b437c70dada905c9415bad321222763e003130dbb8e96db473fb27cf6a9e37281d984730d7b35d1aa67e5e5

    • SSDEEP

      24576:hye19Mg4rpZ0j9tE78PLy+ravKruEdCpnEqxBc2:Ue1qTrv8y78z+HEcpEp

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Healer family

    • Modifies Windows Defender Real-time Protection settings

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks