Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bc04bd9b306eb21c40f903a0183e950e8654f2f0f6babe776a01d436bb6ec70d
-
Size
4.2MB
-
Sample
230804-f3f67aag5z
-
MD5
e5840e132b0a2a082ca911f6906c41f6
-
SHA1
4aa12f2cb587f0f6d4498df530b17e30a8df5a41
-
SHA256
bc04bd9b306eb21c40f903a0183e950e8654f2f0f6babe776a01d436bb6ec70d
-
SHA512
bca443c1538b3bf707e233aa28015e4be357256f9fb9ca98c31faa559096955659b7c7454f48ec330c71d6155c8bb8718e774e10dfd77e7adf8a86ae2d1fa92f
-
SSDEEP
98304:0JRdPqRVNzfxhpmCltJfXHrByOEDlImIiOhKJ:0ndeVRltxAZlgBk
Static task
static1
Malware Config
Targets
-
-
Target
bc04bd9b306eb21c40f903a0183e950e8654f2f0f6babe776a01d436bb6ec70d
-
Size
4.2MB
-
MD5
e5840e132b0a2a082ca911f6906c41f6
-
SHA1
4aa12f2cb587f0f6d4498df530b17e30a8df5a41
-
SHA256
bc04bd9b306eb21c40f903a0183e950e8654f2f0f6babe776a01d436bb6ec70d
-
SHA512
bca443c1538b3bf707e233aa28015e4be357256f9fb9ca98c31faa559096955659b7c7454f48ec330c71d6155c8bb8718e774e10dfd77e7adf8a86ae2d1fa92f
-
SSDEEP
98304:0JRdPqRVNzfxhpmCltJfXHrByOEDlImIiOhKJ:0ndeVRltxAZlgBk
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1