Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c468fa297d04584a04dc608fc7e68715a970cc89933aaa41681d41a1f7ad29a5
-
Size
4.1MB
-
Sample
231023-larp4sfd2t
-
MD5
276e24539fd6fa4597d55fa9ca7f8bff
-
SHA1
bc67a53310d0fc73ace17426fdad9727db016820
-
SHA256
c468fa297d04584a04dc608fc7e68715a970cc89933aaa41681d41a1f7ad29a5
-
SHA512
1dac52aa1b665a0d126e532090bde24f1cf0b868180038ec6f35795f0a6c404020c8cb657e8f8966bff71fbaa8204ef32eec806b86680949aea69cf7f69b5863
-
SSDEEP
98304:NadcDEzvfIQt58f3o3QYVWhvfm4/xceNeGnmKid/N/rS2:gddzvAQtKP8Evf7K8nmKidl/7
Static task
static1
Malware Config
Targets
-
-
Target
c468fa297d04584a04dc608fc7e68715a970cc89933aaa41681d41a1f7ad29a5
-
Size
4.1MB
-
MD5
276e24539fd6fa4597d55fa9ca7f8bff
-
SHA1
bc67a53310d0fc73ace17426fdad9727db016820
-
SHA256
c468fa297d04584a04dc608fc7e68715a970cc89933aaa41681d41a1f7ad29a5
-
SHA512
1dac52aa1b665a0d126e532090bde24f1cf0b868180038ec6f35795f0a6c404020c8cb657e8f8966bff71fbaa8204ef32eec806b86680949aea69cf7f69b5863
-
SSDEEP
98304:NadcDEzvfIQt58f3o3QYVWhvfm4/xceNeGnmKid/N/rS2:gddzvAQtKP8Evf7K8nmKidl/7
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1