Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
96ef522725f5822b94b07d14e03b8efb2fcf233721efcec944b6b98aaca16836
-
Size
4.1MB
-
Sample
231024-qafeasda7z
-
MD5
f7051ae929343a7c72e6b7ec772f6257
-
SHA1
abbc49a44757c094c259920f46acbca0856e9cb6
-
SHA256
96ef522725f5822b94b07d14e03b8efb2fcf233721efcec944b6b98aaca16836
-
SHA512
bdb1992d5582834fffad3998f6b75ef87e7d69f842b7ee326df42f09ea5e86a019340154d75e4b6ed618538fa8a45552717a2253211c61f282de8d42d4a4bb70
-
SSDEEP
98304:aerVYOIxC4S9UED7/3iDAzn4vCVV+ayMKt9nOlg58+i:LVYOI8DD7/3iDE8A+ayMuVlCF
Static task
static1
Malware Config
Targets
-
-
Target
96ef522725f5822b94b07d14e03b8efb2fcf233721efcec944b6b98aaca16836
-
Size
4.1MB
-
MD5
f7051ae929343a7c72e6b7ec772f6257
-
SHA1
abbc49a44757c094c259920f46acbca0856e9cb6
-
SHA256
96ef522725f5822b94b07d14e03b8efb2fcf233721efcec944b6b98aaca16836
-
SHA512
bdb1992d5582834fffad3998f6b75ef87e7d69f842b7ee326df42f09ea5e86a019340154d75e4b6ed618538fa8a45552717a2253211c61f282de8d42d4a4bb70
-
SSDEEP
98304:aerVYOIxC4S9UED7/3iDAzn4vCVV+ayMKt9nOlg58+i:LVYOI8DD7/3iDE8A+ayMuVlCF
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1