Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a89cf174dcb2daadea7b9f252308040d5277dfa07538f5fd7bdf8834fffb9f65

  • Size

    4.1MB

  • Sample

    221018-jz2khafcgk

  • MD5

    22857e924f1a0153faac98c513e3a823

  • SHA1

    01b234b9161ef7d69b34059f73b65b45b1a07a7d

  • SHA256

    a89cf174dcb2daadea7b9f252308040d5277dfa07538f5fd7bdf8834fffb9f65

  • SHA512

    3c3342138a967cbf743d042a4dc8d56e110ad2451a7da0c33c7e73e1c5cdd478acc8635912d92480d03bf60a9e3635308e4c0e82e01214f45499ab3a9eb61b92

  • SSDEEP

    98304:nwbZJ20mG4DY+TCNLq6lOAbBcSU0YNFCfSR80szEp9eBGDI2VFzxso5:wlmA+ALbbSSUJP1Rfh97DXFzum

Malware Config

Targets

    • Target

      a89cf174dcb2daadea7b9f252308040d5277dfa07538f5fd7bdf8834fffb9f65

    • Size

      4.1MB

    • MD5

      22857e924f1a0153faac98c513e3a823

    • SHA1

      01b234b9161ef7d69b34059f73b65b45b1a07a7d

    • SHA256

      a89cf174dcb2daadea7b9f252308040d5277dfa07538f5fd7bdf8834fffb9f65

    • SHA512

      3c3342138a967cbf743d042a4dc8d56e110ad2451a7da0c33c7e73e1c5cdd478acc8635912d92480d03bf60a9e3635308e4c0e82e01214f45499ab3a9eb61b92

    • SSDEEP

      98304:nwbZJ20mG4DY+TCNLq6lOAbBcSU0YNFCfSR80szEp9eBGDI2VFzxso5:wlmA+ALbbSSUJP1Rfh97DXFzum

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Windows security bypass

    • Executes dropped EXE

    • Modifies Windows Firewall

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks