Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9567bb76bd5eb7c2e98c8d24585eb355a63e3d526b8ebc3b9bb84df2b20c909a
-
Size
4.1MB
-
Sample
230816-qpe23sbb27
-
MD5
23009235e36a9590c748edfcaf4bc8e4
-
SHA1
73fe5f287a61d3f25ca3525b5ccc946ce14946ac
-
SHA256
9567bb76bd5eb7c2e98c8d24585eb355a63e3d526b8ebc3b9bb84df2b20c909a
-
SHA512
29c75eba0d01be824368f57d136c40cf7350108e0f381e4813878a3371e9b157f27d835a5da08e9b4efdb16df142cbe4450d9f3b1697f20a1ed32436657d3d5c
-
SSDEEP
98304:WWqe+b/7k4sGWuANlwXYbFcSugZ5LEf09v/EPlESztZp:w7NsLlNlwXYbF1ugZ5B96n
Static task
static1
Malware Config
Targets
-
-
Target
9567bb76bd5eb7c2e98c8d24585eb355a63e3d526b8ebc3b9bb84df2b20c909a
-
Size
4.1MB
-
MD5
23009235e36a9590c748edfcaf4bc8e4
-
SHA1
73fe5f287a61d3f25ca3525b5ccc946ce14946ac
-
SHA256
9567bb76bd5eb7c2e98c8d24585eb355a63e3d526b8ebc3b9bb84df2b20c909a
-
SHA512
29c75eba0d01be824368f57d136c40cf7350108e0f381e4813878a3371e9b157f27d835a5da08e9b4efdb16df142cbe4450d9f3b1697f20a1ed32436657d3d5c
-
SSDEEP
98304:WWqe+b/7k4sGWuANlwXYbFcSugZ5LEf09v/EPlESztZp:w7NsLlNlwXYbF1ugZ5B96n
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1