Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
90df1e1d4b3914d01abcc75b0fa967fa1df23f44aaf86c8207e213386541817b
-
Size
4.1MB
-
Sample
231212-vf5nlaach3
-
MD5
84a5024796f9f44d7818e51c4f38b0f1
-
SHA1
e028806848ae73eea4cba7c09d969a19e8297277
-
SHA256
90df1e1d4b3914d01abcc75b0fa967fa1df23f44aaf86c8207e213386541817b
-
SHA512
6afcbfe8390b3c6133195936877779902e63440fa306e337fdbdcfaef17a3bd4f2cffe06a04106e2ff54dbf5c02dfdcdac9567f14bb3003c7b69d173217adc6c
-
SSDEEP
98304:GGVqP0yhBzLxz/pe3iv/3aGzN2wL3r2lBgJdSO:2Bzdbph/ZziwJdSO
Static task
static1
Malware Config
Targets
-
-
Target
90df1e1d4b3914d01abcc75b0fa967fa1df23f44aaf86c8207e213386541817b
-
Size
4.1MB
-
MD5
84a5024796f9f44d7818e51c4f38b0f1
-
SHA1
e028806848ae73eea4cba7c09d969a19e8297277
-
SHA256
90df1e1d4b3914d01abcc75b0fa967fa1df23f44aaf86c8207e213386541817b
-
SHA512
6afcbfe8390b3c6133195936877779902e63440fa306e337fdbdcfaef17a3bd4f2cffe06a04106e2ff54dbf5c02dfdcdac9567f14bb3003c7b69d173217adc6c
-
SSDEEP
98304:GGVqP0yhBzLxz/pe3iv/3aGzN2wL3r2lBgJdSO:2Bzdbph/ZziwJdSO
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1