Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8ba0e78ba0a1c91f2bae4f90b70b9cfa5bf152c25c71e1f32d836ec4c26858d6
-
Size
4.1MB
-
Sample
230713-ywwbmsah46
-
MD5
ae1f300f8bfa8ab0a321a135a2d7e55c
-
SHA1
7bee4c6b787753474d8695bb601dc58bf9d47895
-
SHA256
8ba0e78ba0a1c91f2bae4f90b70b9cfa5bf152c25c71e1f32d836ec4c26858d6
-
SHA512
46089e352c79548b0021ea8dda51efd85a5e2633826f8492d4a35afe4c58e92375e87f19900cb792a0b5962d27cdd0dfde5dc97af1a2baff2762688f69b8a01c
-
SSDEEP
98304:1digYjF39jUtoX74cvNom2bgc7EUu6tSvHJkfHab3iSM:1MgYjXjWoX9VomrcHu6YBYaBM
Static task
static1
Malware Config
Targets
-
-
Target
8ba0e78ba0a1c91f2bae4f90b70b9cfa5bf152c25c71e1f32d836ec4c26858d6
-
Size
4.1MB
-
MD5
ae1f300f8bfa8ab0a321a135a2d7e55c
-
SHA1
7bee4c6b787753474d8695bb601dc58bf9d47895
-
SHA256
8ba0e78ba0a1c91f2bae4f90b70b9cfa5bf152c25c71e1f32d836ec4c26858d6
-
SHA512
46089e352c79548b0021ea8dda51efd85a5e2633826f8492d4a35afe4c58e92375e87f19900cb792a0b5962d27cdd0dfde5dc97af1a2baff2762688f69b8a01c
-
SSDEEP
98304:1digYjF39jUtoX74cvNom2bgc7EUu6tSvHJkfHab3iSM:1MgYjXjWoX9VomrcHu6YBYaBM
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-