Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a8fd268f71cf14f567150d24036a970b430f2394b2e59f3934f3ddc247c8bbf1
-
Size
4.2MB
-
Sample
240326-q2a9naee2z
-
MD5
a3929426f6905faa5f4acb7953cc92ca
-
SHA1
24e48ebb800b5b5b7a93c357f5da4aaf54a46ebb
-
SHA256
a8fd268f71cf14f567150d24036a970b430f2394b2e59f3934f3ddc247c8bbf1
-
SHA512
94d7fd056d52f4667ffbe4dbab0673b0ca21d12022f2dd317c67358ce788dae4b9bd1b764015454dcd2efa0a5d649c4a6c38e27ba84d63c271ede3517270da89
-
SSDEEP
98304:hcc1VimWaGwQyR5Ub10pmF8uf1WAu/wu8XRZ5MLcu:6gqwQyDUbupZwu/38XH5MLh
Static task
static1
Behavioral task
behavioral1
Sample
a8fd268f71cf14f567150d24036a970b430f2394b2e59f3934f3ddc247c8bbf1.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
a8fd268f71cf14f567150d24036a970b430f2394b2e59f3934f3ddc247c8bbf1
-
Size
4.2MB
-
MD5
a3929426f6905faa5f4acb7953cc92ca
-
SHA1
24e48ebb800b5b5b7a93c357f5da4aaf54a46ebb
-
SHA256
a8fd268f71cf14f567150d24036a970b430f2394b2e59f3934f3ddc247c8bbf1
-
SHA512
94d7fd056d52f4667ffbe4dbab0673b0ca21d12022f2dd317c67358ce788dae4b9bd1b764015454dcd2efa0a5d649c4a6c38e27ba84d63c271ede3517270da89
-
SSDEEP
98304:hcc1VimWaGwQyR5Ub10pmF8uf1WAu/wu8XRZ5MLcu:6gqwQyDUbupZwu/38XH5MLh
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1