Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
769fa4426113af9fd11509a6fcf22bda363d1b509b5ef37e7c0dacb3dfe92d1c
-
Size
4.1MB
-
Sample
230329-t2jsksaf8t
-
MD5
be3e4ff45023420855bca037e9a86548
-
SHA1
8a7884f774084478ddf4075b84d7bc9f0ecf9cae
-
SHA256
769fa4426113af9fd11509a6fcf22bda363d1b509b5ef37e7c0dacb3dfe92d1c
-
SHA512
3d6b840ee3a93891cf6a6d6e940fb14e57e437d8d40bebc38e9b035733989be8d96674cff5a0e9fd7f739790d4bad03d67794705cf2ef51b60601cc2202dfccd
-
SSDEEP
49152:Sl58oGO/1alm2ulPvxlN9PMJxgVhgiPuJNoBVnJx5s9+veMOJSWvTgrATlnsQCN:q+Ren2ulHxlrMJxgVhFnB95321JjU8dW
Static task
static1
Malware Config
Targets
-
-
Target
769fa4426113af9fd11509a6fcf22bda363d1b509b5ef37e7c0dacb3dfe92d1c
-
Size
4.1MB
-
MD5
be3e4ff45023420855bca037e9a86548
-
SHA1
8a7884f774084478ddf4075b84d7bc9f0ecf9cae
-
SHA256
769fa4426113af9fd11509a6fcf22bda363d1b509b5ef37e7c0dacb3dfe92d1c
-
SHA512
3d6b840ee3a93891cf6a6d6e940fb14e57e437d8d40bebc38e9b035733989be8d96674cff5a0e9fd7f739790d4bad03d67794705cf2ef51b60601cc2202dfccd
-
SSDEEP
49152:Sl58oGO/1alm2ulPvxlN9PMJxgVhgiPuJNoBVnJx5s9+veMOJSWvTgrATlnsQCN:q+Ren2ulHxlrMJxgVhFnB95321JjU8dW
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-