Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
01cc1cd7178f92189da58f102e5f67fc494b41e779ed9bffa65a6eb757e7970c
-
Size
4.1MB
-
Sample
240406-1c389acc36
-
MD5
882f5f9e33335cab4e179d3e56f315df
-
SHA1
c2a27b083624994b79aa4d1314ab71d07d85d42b
-
SHA256
01cc1cd7178f92189da58f102e5f67fc494b41e779ed9bffa65a6eb757e7970c
-
SHA512
440193d99194599fd82c42b2cd6ca9014c40e599f74b1398c2fa641c5e75773ae9424407967437506084e663c1fefc37c6370c528d409c46d46e09de2d362b2d
-
SSDEEP
98304:/ZTJtvrSQI+RdfgxNOWs+luvBV3Kjpf8MTPWtsil5s1:hVJ5f9clKG+MTut9E1
Static task
static1
Behavioral task
behavioral1
Sample
01cc1cd7178f92189da58f102e5f67fc494b41e779ed9bffa65a6eb757e7970c.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
01cc1cd7178f92189da58f102e5f67fc494b41e779ed9bffa65a6eb757e7970c
-
Size
4.1MB
-
MD5
882f5f9e33335cab4e179d3e56f315df
-
SHA1
c2a27b083624994b79aa4d1314ab71d07d85d42b
-
SHA256
01cc1cd7178f92189da58f102e5f67fc494b41e779ed9bffa65a6eb757e7970c
-
SHA512
440193d99194599fd82c42b2cd6ca9014c40e599f74b1398c2fa641c5e75773ae9424407967437506084e663c1fefc37c6370c528d409c46d46e09de2d362b2d
-
SSDEEP
98304:/ZTJtvrSQI+RdfgxNOWs+luvBV3Kjpf8MTPWtsil5s1:hVJ5f9clKG+MTut9E1
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1