Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9e6cd0bdd2b43f9735487eed1119e233384524da9381eb7fdcf5cf9ddc6c416f
-
Size
4.2MB
-
Sample
231003-x76q3shb38
-
MD5
2251295b6f35bc37b8ce03399bb9950a
-
SHA1
0c03f592e448a4e6348ae1eae16f508eac93a8e5
-
SHA256
9e6cd0bdd2b43f9735487eed1119e233384524da9381eb7fdcf5cf9ddc6c416f
-
SHA512
7d04f5fbc21f30d79a4dc3a84b8ddb8db2ab535e1d3d4dd2c8e6bf35c78efdcff53e2512def3f55254b268aebfb034d2fb189d5e48f17b149f339dfe56dd2c6f
-
SSDEEP
98304:jUz34gHK7L+1pSUFiDEw1wHudwMFKo10eGOWTguq125RLB:Q4KJpjMx1wHudZFf7MqY5r
Static task
static1
Malware Config
Targets
-
-
Target
9e6cd0bdd2b43f9735487eed1119e233384524da9381eb7fdcf5cf9ddc6c416f
-
Size
4.2MB
-
MD5
2251295b6f35bc37b8ce03399bb9950a
-
SHA1
0c03f592e448a4e6348ae1eae16f508eac93a8e5
-
SHA256
9e6cd0bdd2b43f9735487eed1119e233384524da9381eb7fdcf5cf9ddc6c416f
-
SHA512
7d04f5fbc21f30d79a4dc3a84b8ddb8db2ab535e1d3d4dd2c8e6bf35c78efdcff53e2512def3f55254b268aebfb034d2fb189d5e48f17b149f339dfe56dd2c6f
-
SSDEEP
98304:jUz34gHK7L+1pSUFiDEw1wHudwMFKo10eGOWTguq125RLB:Q4KJpjMx1wHudZFf7MqY5r
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1