Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0d41a644613d16ab035f83d8548cc9a829f6e812b8eaf75548eeb10325671d39
-
Size
4.2MB
-
Sample
240419-wgk61sca6s
-
MD5
623f4f74e8508ce00aa32e70a30b9c21
-
SHA1
d13e0f7ef5da9a7e45c62fdd05eb2a6f2c9126b4
-
SHA256
0d41a644613d16ab035f83d8548cc9a829f6e812b8eaf75548eeb10325671d39
-
SHA512
e9edb71f99be86452b8f76ad31939e314c1004d479c94a6b60f6157f4bcd6bb73a96fe63bd8bc26553b9cafdadc3318549a4f5fbb2e68abf5a740033b3459ee3
-
SSDEEP
98304:dBy5JAu+Hk0Et5Mgg8VWlfA2+5+VVv7Fm6fCc:WAu+ENnjVyYiVNw4B
Static task
static1
Behavioral task
behavioral1
Sample
0d41a644613d16ab035f83d8548cc9a829f6e812b8eaf75548eeb10325671d39.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
0d41a644613d16ab035f83d8548cc9a829f6e812b8eaf75548eeb10325671d39
-
Size
4.2MB
-
MD5
623f4f74e8508ce00aa32e70a30b9c21
-
SHA1
d13e0f7ef5da9a7e45c62fdd05eb2a6f2c9126b4
-
SHA256
0d41a644613d16ab035f83d8548cc9a829f6e812b8eaf75548eeb10325671d39
-
SHA512
e9edb71f99be86452b8f76ad31939e314c1004d479c94a6b60f6157f4bcd6bb73a96fe63bd8bc26553b9cafdadc3318549a4f5fbb2e68abf5a740033b3459ee3
-
SSDEEP
98304:dBy5JAu+Hk0Et5Mgg8VWlfA2+5+VVv7Fm6fCc:WAu+ENnjVyYiVNw4B
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1