Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
de0eb473b5a390c04b21173849cfbcc958cd90f05c5be65c0600e626635984a4
-
Size
4.1MB
-
Sample
231106-q5yt5abe5s
-
MD5
0dd37d32b2d15ce26ae5f7fd711b9d28
-
SHA1
045e06d649c4562f50d860d62cf3ff5368c57447
-
SHA256
de0eb473b5a390c04b21173849cfbcc958cd90f05c5be65c0600e626635984a4
-
SHA512
cb87119cb8dd3ba70f41ac2122fff220096aa6ecc363aa04e97c4cf4f0513db38aa6119137c5778f0275c1f5ba4d75d8f757541065b24d304746868c1e2856d4
-
SSDEEP
98304:gHeHXGGmYFuHsBIxknjn1eYgExLMY+GACXMAVfwuZ7:pH2GmouHsBIWnBAKBf1Z7
Static task
static1
Malware Config
Targets
-
-
Target
de0eb473b5a390c04b21173849cfbcc958cd90f05c5be65c0600e626635984a4
-
Size
4.1MB
-
MD5
0dd37d32b2d15ce26ae5f7fd711b9d28
-
SHA1
045e06d649c4562f50d860d62cf3ff5368c57447
-
SHA256
de0eb473b5a390c04b21173849cfbcc958cd90f05c5be65c0600e626635984a4
-
SHA512
cb87119cb8dd3ba70f41ac2122fff220096aa6ecc363aa04e97c4cf4f0513db38aa6119137c5778f0275c1f5ba4d75d8f757541065b24d304746868c1e2856d4
-
SSDEEP
98304:gHeHXGGmYFuHsBIxknjn1eYgExLMY+GACXMAVfwuZ7:pH2GmouHsBIWnBAKBf1Z7
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1