Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
963772e741331e7c84023b72abe26766336fbdd839245dd2ac902f48a37eee69
-
Size
4.1MB
-
Sample
231212-mwy7rabfbp
-
MD5
e0d9db028e94aa7b46e70b88026747ca
-
SHA1
e7251f233baeca9e90fd8b118462f35df27dade1
-
SHA256
963772e741331e7c84023b72abe26766336fbdd839245dd2ac902f48a37eee69
-
SHA512
91c3e66d9426fe2b1a07ec5f12e0c3b4769aac9dddca38993f4bab31e6c5dfc822df96b94b3a791ce0f19169bc9f1167399bce48bded040cd142327d08aa8b7c
-
SSDEEP
98304:U/XAXiKEg2fLanlNOzPygtzesGe0sYy2G4Er1Snm1dGZErEU1pxh2w:0dLaFo5zCy2GrF6ZEDDMw
Static task
static1
Malware Config
Targets
-
-
Target
963772e741331e7c84023b72abe26766336fbdd839245dd2ac902f48a37eee69
-
Size
4.1MB
-
MD5
e0d9db028e94aa7b46e70b88026747ca
-
SHA1
e7251f233baeca9e90fd8b118462f35df27dade1
-
SHA256
963772e741331e7c84023b72abe26766336fbdd839245dd2ac902f48a37eee69
-
SHA512
91c3e66d9426fe2b1a07ec5f12e0c3b4769aac9dddca38993f4bab31e6c5dfc822df96b94b3a791ce0f19169bc9f1167399bce48bded040cd142327d08aa8b7c
-
SSDEEP
98304:U/XAXiKEg2fLanlNOzPygtzesGe0sYy2G4Er1Snm1dGZErEU1pxh2w:0dLaFo5zCy2GrF6ZEDDMw
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1