Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d532e8acd2dab016cfb67bce69c6b197a70cd65ccc267ab3f529d5db49bde70c
-
Size
4.2MB
-
Sample
230820-1r37ssbc7y
-
MD5
0e4f5064c3253b084b1f5116cb12ab81
-
SHA1
d76bd118df010f0694940f6d7fd9c7e8e21ed1d0
-
SHA256
d532e8acd2dab016cfb67bce69c6b197a70cd65ccc267ab3f529d5db49bde70c
-
SHA512
948be2faf9cc2f1aa15f3ebd1be951407bb4d9dad2abbfbbc5591300eff558b5f3db900d999951840b86fb870c1f0bd3fbd5a820bc01d541c33fe7cbdc431e1d
-
SSDEEP
98304:EqLAuddi87hhRJCVtDwYvahe/SnK2vooK4yxiCfs1Y62v65:jjdhRJCoY7aK2wo1B1j2S5
Static task
static1
Malware Config
Targets
-
-
Target
d532e8acd2dab016cfb67bce69c6b197a70cd65ccc267ab3f529d5db49bde70c
-
Size
4.2MB
-
MD5
0e4f5064c3253b084b1f5116cb12ab81
-
SHA1
d76bd118df010f0694940f6d7fd9c7e8e21ed1d0
-
SHA256
d532e8acd2dab016cfb67bce69c6b197a70cd65ccc267ab3f529d5db49bde70c
-
SHA512
948be2faf9cc2f1aa15f3ebd1be951407bb4d9dad2abbfbbc5591300eff558b5f3db900d999951840b86fb870c1f0bd3fbd5a820bc01d541c33fe7cbdc431e1d
-
SSDEEP
98304:EqLAuddi87hhRJCVtDwYvahe/SnK2vooK4yxiCfs1Y62v65:jjdhRJCoY7aK2wo1B1j2S5
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1