Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
643500cb87ae0d06fcf695d5d19c78169e26daea0adf63ec3e753a6a4a22141c
-
Size
4.1MB
-
Sample
231031-gt5c4aba26
-
MD5
943f28a2db3c700d6c097c4b4321b707
-
SHA1
56845d4d44bd257670fc9109b7d18e1fa79abcd5
-
SHA256
643500cb87ae0d06fcf695d5d19c78169e26daea0adf63ec3e753a6a4a22141c
-
SHA512
c8255c1787a014bed2e1c9c8e82a568013f47c1dce3d69966d9fd92541c911ad601e10b3e9d292ace755f861ebd32f82a90db6e91770c9cfbed9c290826455fa
-
SSDEEP
98304:VWQJ3/SZh78Y2fGqAFWzjIygktZxbAwuNDww:4YUh78Y2+qAejXHbAw05
Static task
static1
Malware Config
Targets
-
-
Target
643500cb87ae0d06fcf695d5d19c78169e26daea0adf63ec3e753a6a4a22141c
-
Size
4.1MB
-
MD5
943f28a2db3c700d6c097c4b4321b707
-
SHA1
56845d4d44bd257670fc9109b7d18e1fa79abcd5
-
SHA256
643500cb87ae0d06fcf695d5d19c78169e26daea0adf63ec3e753a6a4a22141c
-
SHA512
c8255c1787a014bed2e1c9c8e82a568013f47c1dce3d69966d9fd92541c911ad601e10b3e9d292ace755f861ebd32f82a90db6e91770c9cfbed9c290826455fa
-
SSDEEP
98304:VWQJ3/SZh78Y2fGqAFWzjIygktZxbAwuNDww:4YUh78Y2+qAejXHbAw05
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1