Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3a0657f84c5464bc79dddc070bc9ba297d1284f2edbd3efa655c5a215c2c5931
-
Size
4.2MB
-
Sample
240502-yw247agg47
-
MD5
0f6f8c16a70edd50e9e000c4ff4ac2ec
-
SHA1
ed5a776c43806713cb97a23309669389df0e7751
-
SHA256
3a0657f84c5464bc79dddc070bc9ba297d1284f2edbd3efa655c5a215c2c5931
-
SHA512
0c8d85a2b26ebc573ba0d92e1c8fab9676abe0fded9c0634cb8a62254ef8c50246440ce2e97c56e693c2c492c3b59a9d10f35fe27f0cbd380b6d641d4f0c9464
-
SSDEEP
98304:p6SrQKkBQC4PnHNiNLk7n0q6bsVEgqWgwUIwD+toyYlM5LNuOc:nvwh4PnHck7nOsVEgAwH9tZh5Ls
Static task
static1
Behavioral task
behavioral1
Sample
3a0657f84c5464bc79dddc070bc9ba297d1284f2edbd3efa655c5a215c2c5931.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
3a0657f84c5464bc79dddc070bc9ba297d1284f2edbd3efa655c5a215c2c5931
-
Size
4.2MB
-
MD5
0f6f8c16a70edd50e9e000c4ff4ac2ec
-
SHA1
ed5a776c43806713cb97a23309669389df0e7751
-
SHA256
3a0657f84c5464bc79dddc070bc9ba297d1284f2edbd3efa655c5a215c2c5931
-
SHA512
0c8d85a2b26ebc573ba0d92e1c8fab9676abe0fded9c0634cb8a62254ef8c50246440ce2e97c56e693c2c492c3b59a9d10f35fe27f0cbd380b6d641d4f0c9464
-
SSDEEP
98304:p6SrQKkBQC4PnHNiNLk7n0q6bsVEgqWgwUIwD+toyYlM5LNuOc:nvwh4PnHck7nOsVEgAwH9tZh5Ls
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1