Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b80c4f969de12b5fd6b4915beac038201fd7934bf8b56c52b401326e7714b663
-
Size
4.1MB
-
Sample
240513-x7nkhaba3w
-
MD5
4cac48f42c1abb48c8fbedd4dcdc45eb
-
SHA1
5a3dcaf9ce9b320120048b8ef03874a62f7bfb35
-
SHA256
b80c4f969de12b5fd6b4915beac038201fd7934bf8b56c52b401326e7714b663
-
SHA512
ae31094542a90636fda51c69c7a8fe77f748d132e2d13cf658930543b45fd0b743b70ec2f181ae14d6df0a29a1172b767df953600806c603d063614199419de4
-
SSDEEP
98304:giuI6DIhBokpgzX0pmgZkEzb3q3S3MwW582eGBSMrIG:giuIfSwmakEv3q3Yd2HBSK
Static task
static1
Behavioral task
behavioral1
Sample
b80c4f969de12b5fd6b4915beac038201fd7934bf8b56c52b401326e7714b663.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
b80c4f969de12b5fd6b4915beac038201fd7934bf8b56c52b401326e7714b663
-
Size
4.1MB
-
MD5
4cac48f42c1abb48c8fbedd4dcdc45eb
-
SHA1
5a3dcaf9ce9b320120048b8ef03874a62f7bfb35
-
SHA256
b80c4f969de12b5fd6b4915beac038201fd7934bf8b56c52b401326e7714b663
-
SHA512
ae31094542a90636fda51c69c7a8fe77f748d132e2d13cf658930543b45fd0b743b70ec2f181ae14d6df0a29a1172b767df953600806c603d063614199419de4
-
SSDEEP
98304:giuI6DIhBokpgzX0pmgZkEzb3q3S3MwW582eGBSMrIG:giuIfSwmakEv3q3Yd2HBSK
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1