Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b2b2199ac6fd44ca58145b2b1d893a10f92652899f5e3da228d02a2972677053
-
Size
4.1MB
-
Sample
231104-pydd6sca92
-
MD5
a937edab03baba5ad2153b824b254593
-
SHA1
1d51ea3ce9d1e43c2ef2b3be78d01846ebaa021a
-
SHA256
b2b2199ac6fd44ca58145b2b1d893a10f92652899f5e3da228d02a2972677053
-
SHA512
4738637db511188ae710356763454e2edcd0579f458b26702e40cdba92584a4a3fc0fc261e440fde629ff47e6030bea14da5687b8dd9b1313013161c982c7045
-
SSDEEP
98304:wBAagpdOpRt0b7+jUBGMiTI26sbPHOutgzPTP//9ua+P:CAaMOpSJ26sDOuSLTkxP
Static task
static1
Malware Config
Targets
-
-
Target
b2b2199ac6fd44ca58145b2b1d893a10f92652899f5e3da228d02a2972677053
-
Size
4.1MB
-
MD5
a937edab03baba5ad2153b824b254593
-
SHA1
1d51ea3ce9d1e43c2ef2b3be78d01846ebaa021a
-
SHA256
b2b2199ac6fd44ca58145b2b1d893a10f92652899f5e3da228d02a2972677053
-
SHA512
4738637db511188ae710356763454e2edcd0579f458b26702e40cdba92584a4a3fc0fc261e440fde629ff47e6030bea14da5687b8dd9b1313013161c982c7045
-
SSDEEP
98304:wBAagpdOpRt0b7+jUBGMiTI26sbPHOutgzPTP//9ua+P:CAaMOpSJ26sDOuSLTkxP
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1