Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b688088f4b435856cf9fcb9fc5af02d40d3a1883efe65eff86f8870c87e50e72
-
Size
4.1MB
-
Sample
230807-vmwz2agf32
-
MD5
bcd4ff0b06587bc0198b66780ca9f4e8
-
SHA1
ea43dc47968672e2a8e9f5444bd623a246565ce5
-
SHA256
b688088f4b435856cf9fcb9fc5af02d40d3a1883efe65eff86f8870c87e50e72
-
SHA512
e917dd5a8521598182c41db5008b4a51efab04cafd5d0b24d2f647a7c3e5301280689fd08bb8837e0690d53e26648e055c0b2d17f4db64a2c18339253791854c
-
SSDEEP
98304:evBbRYPka6x9PT8epUHvwxNID21rJ2JoyTXGp7:evB9dzV8kFJ2JoyTXM7
Static task
static1
Malware Config
Targets
-
-
Target
b688088f4b435856cf9fcb9fc5af02d40d3a1883efe65eff86f8870c87e50e72
-
Size
4.1MB
-
MD5
bcd4ff0b06587bc0198b66780ca9f4e8
-
SHA1
ea43dc47968672e2a8e9f5444bd623a246565ce5
-
SHA256
b688088f4b435856cf9fcb9fc5af02d40d3a1883efe65eff86f8870c87e50e72
-
SHA512
e917dd5a8521598182c41db5008b4a51efab04cafd5d0b24d2f647a7c3e5301280689fd08bb8837e0690d53e26648e055c0b2d17f4db64a2c18339253791854c
-
SSDEEP
98304:evBbRYPka6x9PT8epUHvwxNID21rJ2JoyTXGp7:evB9dzV8kFJ2JoyTXM7
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1