Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ff43f8c60af996a8b2c8a5b9d047370f28ef3c7ba1683b7043a3e736b761b4bb
-
Size
4.2MB
-
Sample
230529-swwdracd83
-
MD5
a51330277403d71f535b588396585a22
-
SHA1
2610c6f9344678f88426d467521bae3ad8011800
-
SHA256
ff43f8c60af996a8b2c8a5b9d047370f28ef3c7ba1683b7043a3e736b761b4bb
-
SHA512
5e99fcdc97b7faab7cd34c2409b69337857f03c1068e4dff5237abcb3185749a4f96610504b85868dcdef7983c109813d60e15743cccf89d97725721b5129ed1
-
SSDEEP
98304:LSer3mNRRMRcFy/UDRwFrUOtaYO77kPSf61Lxin0ElARZR0hiO:YVecE/UDTYo7t0Lm0VKiO
Static task
static1
Malware Config
Targets
-
-
Target
ff43f8c60af996a8b2c8a5b9d047370f28ef3c7ba1683b7043a3e736b761b4bb
-
Size
4.2MB
-
MD5
a51330277403d71f535b588396585a22
-
SHA1
2610c6f9344678f88426d467521bae3ad8011800
-
SHA256
ff43f8c60af996a8b2c8a5b9d047370f28ef3c7ba1683b7043a3e736b761b4bb
-
SHA512
5e99fcdc97b7faab7cd34c2409b69337857f03c1068e4dff5237abcb3185749a4f96610504b85868dcdef7983c109813d60e15743cccf89d97725721b5129ed1
-
SSDEEP
98304:LSer3mNRRMRcFy/UDRwFrUOtaYO77kPSf61Lxin0ElARZR0hiO:YVecE/UDTYo7t0Lm0VKiO
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-