Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
02f182bdff1079e87c16f18ed6df45567e0b7be41569765eea767ae8d7e11ee6
-
Size
4.1MB
-
Sample
231113-t84fkadh9w
-
MD5
7c6b9a7e3943528fdccf0d6fdc68a6f3
-
SHA1
4365ef84a5bf78b0779dd79f6c0a87f037786f10
-
SHA256
02f182bdff1079e87c16f18ed6df45567e0b7be41569765eea767ae8d7e11ee6
-
SHA512
f1bad8a0efef59f26da517275790db78c61e4cdf22b3535ad142df73e013d24853b8537a8a1a7af9f3f0460ee8ef01034dd275ed62def30a2f7723bdcf707e3e
-
SSDEEP
98304:fHv+XyilWYyP9zZxACZeFw7DlvffePBhTqZS:HFiEYyP9zPaw7Dlvf0PuS
Static task
static1
Malware Config
Targets
-
-
Target
02f182bdff1079e87c16f18ed6df45567e0b7be41569765eea767ae8d7e11ee6
-
Size
4.1MB
-
MD5
7c6b9a7e3943528fdccf0d6fdc68a6f3
-
SHA1
4365ef84a5bf78b0779dd79f6c0a87f037786f10
-
SHA256
02f182bdff1079e87c16f18ed6df45567e0b7be41569765eea767ae8d7e11ee6
-
SHA512
f1bad8a0efef59f26da517275790db78c61e4cdf22b3535ad142df73e013d24853b8537a8a1a7af9f3f0460ee8ef01034dd275ed62def30a2f7723bdcf707e3e
-
SSDEEP
98304:fHv+XyilWYyP9zZxACZeFw7DlvffePBhTqZS:HFiEYyP9zPaw7Dlvf0PuS
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1