Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
25239f9d17bd95bfa2e71c3fa08c05e3d05a885dc356bc659f8d27537b5d2ff1
-
Size
4.2MB
-
Sample
230806-n7b22aaa53
-
MD5
f295baaa1740f2bcf4dfa5cd1aeac4e6
-
SHA1
aff0fdf10f3d048bbf9d0806d237ee496c755029
-
SHA256
25239f9d17bd95bfa2e71c3fa08c05e3d05a885dc356bc659f8d27537b5d2ff1
-
SHA512
5ca923474e70af6296102103a74c0400a35b33cd9a15ef05441e401ad2649a174cd9c1809f51b445186c1ccdf5494ae150bdad855049162c8ef034cccb5ab0b8
-
SSDEEP
98304:vLstemEnvDw4c/T2FbBYCti4u4D0pSPIBYqqh:vLRvHm6hM4u4opSPI2
Static task
static1
Malware Config
Targets
-
-
Target
25239f9d17bd95bfa2e71c3fa08c05e3d05a885dc356bc659f8d27537b5d2ff1
-
Size
4.2MB
-
MD5
f295baaa1740f2bcf4dfa5cd1aeac4e6
-
SHA1
aff0fdf10f3d048bbf9d0806d237ee496c755029
-
SHA256
25239f9d17bd95bfa2e71c3fa08c05e3d05a885dc356bc659f8d27537b5d2ff1
-
SHA512
5ca923474e70af6296102103a74c0400a35b33cd9a15ef05441e401ad2649a174cd9c1809f51b445186c1ccdf5494ae150bdad855049162c8ef034cccb5ab0b8
-
SSDEEP
98304:vLstemEnvDw4c/T2FbBYCti4u4D0pSPIBYqqh:vLRvHm6hM4u4opSPI2
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1