Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
693b68775247e6c1aaf832fc9c4679f31e4838f1f933be4ea51ca0df875e241a
-
Size
4.2MB
-
Sample
230608-tyv2fahe61
-
MD5
c099c9e0d7c2300c7f4a8683a9531016
-
SHA1
a8d0f1e74c4c754798004486a7f3df3c16eaf0b2
-
SHA256
693b68775247e6c1aaf832fc9c4679f31e4838f1f933be4ea51ca0df875e241a
-
SHA512
75caa3ba2f3485ee0b0ec3a8d8627a9e6f4e1d297abb7bf997dd07cde15d1bf6fb5637f799504a2b14308c51bc40a5a08fc6b2537fc741be83f0e5bc5c4dbef0
-
SSDEEP
98304:I/5S+b1Z/p6oQSInErfLJd2o/OVdeUy7NtwA:IBnTENnKJ0ZVk1BtwA
Static task
static1
Malware Config
Targets
-
-
Target
693b68775247e6c1aaf832fc9c4679f31e4838f1f933be4ea51ca0df875e241a
-
Size
4.2MB
-
MD5
c099c9e0d7c2300c7f4a8683a9531016
-
SHA1
a8d0f1e74c4c754798004486a7f3df3c16eaf0b2
-
SHA256
693b68775247e6c1aaf832fc9c4679f31e4838f1f933be4ea51ca0df875e241a
-
SHA512
75caa3ba2f3485ee0b0ec3a8d8627a9e6f4e1d297abb7bf997dd07cde15d1bf6fb5637f799504a2b14308c51bc40a5a08fc6b2537fc741be83f0e5bc5c4dbef0
-
SSDEEP
98304:I/5S+b1Z/p6oQSInErfLJd2o/OVdeUy7NtwA:IBnTENnKJ0ZVk1BtwA
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-