Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
468f4991eb45abb0d480123666368d9cba1782bf7be2fe3aa2b4003fb5cd65a1
-
Size
4.2MB
-
Sample
240422-s6r43sdb4z
-
MD5
8092261881613633ac7d2158ecc0376c
-
SHA1
5b2e5a1918b23d09277ab95808c9e3e5c35d2aba
-
SHA256
468f4991eb45abb0d480123666368d9cba1782bf7be2fe3aa2b4003fb5cd65a1
-
SHA512
52d89619a2249b47c32f3a088deb9d0b7dccd683bc1d4ff401b64cd076d550d93eb75826e2380518d6112b28fd6fa4c1dd534a774c718d19551b301ea42526ab
-
SSDEEP
98304:bTr4Zn8ckauLMze8fecNCAwNuLlsIJhS7wxsR8XPBW1bLJsbUO:bgxwLwefOwIiIbSY4wJWbLObt
Static task
static1
Behavioral task
behavioral1
Sample
468f4991eb45abb0d480123666368d9cba1782bf7be2fe3aa2b4003fb5cd65a1.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
468f4991eb45abb0d480123666368d9cba1782bf7be2fe3aa2b4003fb5cd65a1
-
Size
4.2MB
-
MD5
8092261881613633ac7d2158ecc0376c
-
SHA1
5b2e5a1918b23d09277ab95808c9e3e5c35d2aba
-
SHA256
468f4991eb45abb0d480123666368d9cba1782bf7be2fe3aa2b4003fb5cd65a1
-
SHA512
52d89619a2249b47c32f3a088deb9d0b7dccd683bc1d4ff401b64cd076d550d93eb75826e2380518d6112b28fd6fa4c1dd534a774c718d19551b301ea42526ab
-
SSDEEP
98304:bTr4Zn8ckauLMze8fecNCAwNuLlsIJhS7wxsR8XPBW1bLJsbUO:bgxwLwefOwIiIbSY4wJWbLObt
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1