Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dee6774ec0982bbdaca9fd3e8766e2ae76afb38b7d5856ae63b8738f04890500
-
Size
4.2MB
-
Sample
231116-kc5t3sgg95
-
MD5
3a9c8143ac63b230dc602a2c2f9372de
-
SHA1
e8f01d5e448bbc46df3708c586c46da8bb4bf7d4
-
SHA256
dee6774ec0982bbdaca9fd3e8766e2ae76afb38b7d5856ae63b8738f04890500
-
SHA512
b0840df6d8388b0529e356649c25aaaf5c9180814dff44af7b9b5221057abe19ae84f3254c56db8987d11db33d7bea5c97d0c2b35df385dc4ec5eefcc5997ec8
-
SSDEEP
98304:jL+xkLfOKMBaabC2T6lDT99f560XhMLgDeYJUygu:HMkLaBfbp8XfbXWaJgu
Static task
static1
Malware Config
Targets
-
-
Target
dee6774ec0982bbdaca9fd3e8766e2ae76afb38b7d5856ae63b8738f04890500
-
Size
4.2MB
-
MD5
3a9c8143ac63b230dc602a2c2f9372de
-
SHA1
e8f01d5e448bbc46df3708c586c46da8bb4bf7d4
-
SHA256
dee6774ec0982bbdaca9fd3e8766e2ae76afb38b7d5856ae63b8738f04890500
-
SHA512
b0840df6d8388b0529e356649c25aaaf5c9180814dff44af7b9b5221057abe19ae84f3254c56db8987d11db33d7bea5c97d0c2b35df385dc4ec5eefcc5997ec8
-
SSDEEP
98304:jL+xkLfOKMBaabC2T6lDT99f560XhMLgDeYJUygu:HMkLaBfbp8XfbXWaJgu
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1