Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
573882bde7aaf51acd56ce1c6d08f3e9dd0f02483a34db1c861e742ba3ed287c
-
Size
4.1MB
-
Sample
240509-jbdtjafg4s
-
MD5
7d3f7dde68840c7be1a7b0ae5b7cf39a
-
SHA1
ac6c581f9e0899c7499e4bda3958f329bc977b31
-
SHA256
573882bde7aaf51acd56ce1c6d08f3e9dd0f02483a34db1c861e742ba3ed287c
-
SHA512
b00c86164afec67b0714744523a860192672a7bbbe9cbd16034d0b585757389b703deace9fa05966dae6247728f5c9ac981b944e2e930425c8c4c3499cbda74d
-
SSDEEP
98304:M8tvyuU58PjKrWFJSooNQA2k8bPN+CEev5WXkGYwFdaf:3Uuy8PNJWwxbPN3EK4Daf
Static task
static1
Behavioral task
behavioral1
Sample
573882bde7aaf51acd56ce1c6d08f3e9dd0f02483a34db1c861e742ba3ed287c.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
573882bde7aaf51acd56ce1c6d08f3e9dd0f02483a34db1c861e742ba3ed287c
-
Size
4.1MB
-
MD5
7d3f7dde68840c7be1a7b0ae5b7cf39a
-
SHA1
ac6c581f9e0899c7499e4bda3958f329bc977b31
-
SHA256
573882bde7aaf51acd56ce1c6d08f3e9dd0f02483a34db1c861e742ba3ed287c
-
SHA512
b00c86164afec67b0714744523a860192672a7bbbe9cbd16034d0b585757389b703deace9fa05966dae6247728f5c9ac981b944e2e930425c8c4c3499cbda74d
-
SSDEEP
98304:M8tvyuU58PjKrWFJSooNQA2k8bPN+CEev5WXkGYwFdaf:3Uuy8PNJWwxbPN3EK4Daf
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1