Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c60bb05e532aca62fe0adb19d39a8d59e2f3b490a7966743e9722cbc4d617c9d
-
Size
4.2MB
-
Sample
230824-ywhqjsfd34
-
MD5
4f5559a8ebc265e622b3c9674a8c65ef
-
SHA1
f75cef393a3dd5efcee92a0f5e76e257133983ef
-
SHA256
c60bb05e532aca62fe0adb19d39a8d59e2f3b490a7966743e9722cbc4d617c9d
-
SHA512
a3897781beb7da33f0ca92322da9be459546db8be6fc35723f17fd271227dc9e385aa2d2aad3648b05d5eb7b3afb464758ae9c3fdbb1cc5159efe33f5a3f2047
-
SSDEEP
98304:4PJYirTf0osoK5GxTX1kU/A4EjYw+F6UEXqrlaD:Q18osoK5CTXWU44Ut+EnaMD
Static task
static1
Malware Config
Targets
-
-
Target
c60bb05e532aca62fe0adb19d39a8d59e2f3b490a7966743e9722cbc4d617c9d
-
Size
4.2MB
-
MD5
4f5559a8ebc265e622b3c9674a8c65ef
-
SHA1
f75cef393a3dd5efcee92a0f5e76e257133983ef
-
SHA256
c60bb05e532aca62fe0adb19d39a8d59e2f3b490a7966743e9722cbc4d617c9d
-
SHA512
a3897781beb7da33f0ca92322da9be459546db8be6fc35723f17fd271227dc9e385aa2d2aad3648b05d5eb7b3afb464758ae9c3fdbb1cc5159efe33f5a3f2047
-
SSDEEP
98304:4PJYirTf0osoK5GxTX1kU/A4EjYw+F6UEXqrlaD:Q18osoK5CTXWU44Ut+EnaMD
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1