Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
27049f9241b4bd906c3002e418e492203048db4f7abfcab04b0e32e495edfd63
-
Size
4.1MB
-
Sample
231030-f8j52abb9s
-
MD5
50b82e0d572695aaa4a8840ed0d6dc12
-
SHA1
d96c5defbb2180f2caca6f73ee7b8cd2e5ec5f73
-
SHA256
27049f9241b4bd906c3002e418e492203048db4f7abfcab04b0e32e495edfd63
-
SHA512
b3f5d6436efce336a623c7e958f8a25772b056c7238e5ba961cad21572bbe6d4598923d9772f8e649bf3da6b1e4645df69481139ead8c4de36e9e85c3d925961
-
SSDEEP
98304:jPtQKEW0sbhCPI4FZlUKBfwOa4sfhQTnCR46+:oWn4vhBYD4sfhQ+R6
Static task
static1
Malware Config
Targets
-
-
Target
27049f9241b4bd906c3002e418e492203048db4f7abfcab04b0e32e495edfd63
-
Size
4.1MB
-
MD5
50b82e0d572695aaa4a8840ed0d6dc12
-
SHA1
d96c5defbb2180f2caca6f73ee7b8cd2e5ec5f73
-
SHA256
27049f9241b4bd906c3002e418e492203048db4f7abfcab04b0e32e495edfd63
-
SHA512
b3f5d6436efce336a623c7e958f8a25772b056c7238e5ba961cad21572bbe6d4598923d9772f8e649bf3da6b1e4645df69481139ead8c4de36e9e85c3d925961
-
SSDEEP
98304:jPtQKEW0sbhCPI4FZlUKBfwOa4sfhQTnCR46+:oWn4vhBYD4sfhQ+R6
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1