Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e90ad59a756ed5b21f04b3b655c9aa667366217cd878c07d4381c09d8ece98e9
-
Size
4.1MB
-
Sample
231024-jk595sbe41
-
MD5
f9a941698b25915879429dbc8f35de18
-
SHA1
c597c908aba27b18e31e00a5cdd376e3291e448d
-
SHA256
e90ad59a756ed5b21f04b3b655c9aa667366217cd878c07d4381c09d8ece98e9
-
SHA512
0837c1b8986dbd5e78ca3d9c8c55cc25f6a282c2d0f2cfd2ee5a7d82d1dcaa0bdf0e61a0684de4aff2140ab013c752a8078a2eb9ebffef496a929280ca08cf3b
-
SSDEEP
98304:JDYN209W2T8E9IJqa870LeNIZlDn2Z7jE5hPs/:R09W2R9Is3uKIZsAs/
Static task
static1
Malware Config
Targets
-
-
Target
e90ad59a756ed5b21f04b3b655c9aa667366217cd878c07d4381c09d8ece98e9
-
Size
4.1MB
-
MD5
f9a941698b25915879429dbc8f35de18
-
SHA1
c597c908aba27b18e31e00a5cdd376e3291e448d
-
SHA256
e90ad59a756ed5b21f04b3b655c9aa667366217cd878c07d4381c09d8ece98e9
-
SHA512
0837c1b8986dbd5e78ca3d9c8c55cc25f6a282c2d0f2cfd2ee5a7d82d1dcaa0bdf0e61a0684de4aff2140ab013c752a8078a2eb9ebffef496a929280ca08cf3b
-
SSDEEP
98304:JDYN209W2T8E9IJqa870LeNIZlDn2Z7jE5hPs/:R09W2R9Is3uKIZsAs/
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1