Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a888d2ce1383891630fce28d268dc2414f87659f22068e65a881f72bdf46c43

  • Size

    4.2MB

  • Sample

    240422-pywkrabd82

  • MD5

    1f3ff1e757ee6a06b2571be7ff89bdc2

  • SHA1

    0855d08d3b035f5e0d7cce091e188e54af9fa1a2

  • SHA256

    9a888d2ce1383891630fce28d268dc2414f87659f22068e65a881f72bdf46c43

  • SHA512

    1f53ae1404cdb2cafc92fd829a9e2a2bb52baa2715246a3848398af6459bdfd64148ce498ec6beac6421a4ebd19c88b8be1dcaab55b980b8d80e8b34b342e71a

  • SSDEEP

    98304:qqeDbtUSCablDzO8dtfSoKSfJvA5Rm67mOalZxwkRNXYt:OUMwEfdjhAnWZxjRNIt

Score
10/10
gluptebadropperevasionloaderupx

Malware Config

Targets

    • Target

      9a888d2ce1383891630fce28d268dc2414f87659f22068e65a881f72bdf46c43

    • Size

      4.2MB

    • MD5

      1f3ff1e757ee6a06b2571be7ff89bdc2

    • SHA1

      0855d08d3b035f5e0d7cce091e188e54af9fa1a2

    • SHA256

      9a888d2ce1383891630fce28d268dc2414f87659f22068e65a881f72bdf46c43

    • SHA512

      1f53ae1404cdb2cafc92fd829a9e2a2bb52baa2715246a3848398af6459bdfd64148ce498ec6beac6421a4ebd19c88b8be1dcaab55b980b8d80e8b34b342e71a

    • SSDEEP

      98304:qqeDbtUSCablDzO8dtfSoKSfJvA5Rm67mOalZxwkRNXYt:OUMwEfdjhAnWZxjRNIt

    Score
    10/10
    gluptebadropperevasionloaderupx

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba payload

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks