Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
803d6d624aac137b649befae628d46b886dc0dccec77b96a11cce496676d66b4
-
Size
4.2MB
-
Sample
230922-bp8l3ade67
-
MD5
8e55a9783e66f35b9ff86286d24079b2
-
SHA1
af8a3427cf384cd52eb437e30da919474de6e21b
-
SHA256
803d6d624aac137b649befae628d46b886dc0dccec77b96a11cce496676d66b4
-
SHA512
d1f917921ea631325832094c99f820bcd323f21d10e9ffed0edec5069700d374daa2933029310c8ad6ff1fa2e6e479a8878d975f335ce8568a32ad9544bb2931
-
SSDEEP
98304:8mw1LPDnxxF+Jqv82oqnb20jW7y9i795h4PUaS1EdSCrvUqdsg:UJn1h8gj59e9U61EdRr
Static task
static1
Malware Config
Targets
-
-
Target
803d6d624aac137b649befae628d46b886dc0dccec77b96a11cce496676d66b4
-
Size
4.2MB
-
MD5
8e55a9783e66f35b9ff86286d24079b2
-
SHA1
af8a3427cf384cd52eb437e30da919474de6e21b
-
SHA256
803d6d624aac137b649befae628d46b886dc0dccec77b96a11cce496676d66b4
-
SHA512
d1f917921ea631325832094c99f820bcd323f21d10e9ffed0edec5069700d374daa2933029310c8ad6ff1fa2e6e479a8878d975f335ce8568a32ad9544bb2931
-
SSDEEP
98304:8mw1LPDnxxF+Jqv82oqnb20jW7y9i795h4PUaS1EdSCrvUqdsg:UJn1h8gj59e9U61EdRr
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1