Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ffd7ff06bc77dbaf8b1d636b2963c68aa6cf5e3a05d8dead12cdec5ff8c4aa43
-
Size
4.1MB
-
Sample
231030-q776ksfb72
-
MD5
2138d096b7d6461d4f3f11843bd2a98b
-
SHA1
a192c3dc33efab5ba9dd0140a29ae4c0f4d687ff
-
SHA256
ffd7ff06bc77dbaf8b1d636b2963c68aa6cf5e3a05d8dead12cdec5ff8c4aa43
-
SHA512
269479e9f00c16e62f5ad62f3c6f06579eba9ccd45ff4ee5341519d85b9cadd236d8c06a1fefb2a8645e9bfc5ef225bd87fbbbeaaa738f9d057cb78aacc066e2
-
SSDEEP
98304:mEmLLSQW+QOYjLgSJ7qflKjVQn/yrGN30UJmgpg:X5XAS00q/yrG5Xf6
Static task
static1
Malware Config
Targets
-
-
Target
ffd7ff06bc77dbaf8b1d636b2963c68aa6cf5e3a05d8dead12cdec5ff8c4aa43
-
Size
4.1MB
-
MD5
2138d096b7d6461d4f3f11843bd2a98b
-
SHA1
a192c3dc33efab5ba9dd0140a29ae4c0f4d687ff
-
SHA256
ffd7ff06bc77dbaf8b1d636b2963c68aa6cf5e3a05d8dead12cdec5ff8c4aa43
-
SHA512
269479e9f00c16e62f5ad62f3c6f06579eba9ccd45ff4ee5341519d85b9cadd236d8c06a1fefb2a8645e9bfc5ef225bd87fbbbeaaa738f9d057cb78aacc066e2
-
SSDEEP
98304:mEmLLSQW+QOYjLgSJ7qflKjVQn/yrGN30UJmgpg:X5XAS00q/yrG5Xf6
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1