Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2508c2951285a1739ce3f3bb51266ced8da3b38bf244cd5bc0d21a69280d36bb
-
Size
4.1MB
-
Sample
240514-pmh6aafc2w
-
MD5
b0ad905c9dc82ad025c9897ded2bc15b
-
SHA1
bda3c29d8a8f45cfcee8ac258415d4e5f2ec8e19
-
SHA256
2508c2951285a1739ce3f3bb51266ced8da3b38bf244cd5bc0d21a69280d36bb
-
SHA512
56ee0c317280e69be311e8fd1fc944236b107005bbbb3c2481e6b67517fdbe94a51378e3a216b87063d61593c38e8334bad785a6fcfec13fe24b9904da516d15
-
SSDEEP
98304:GfV9Xpq/Nr9h7yiBXUeur8+6kv7/RnnOPzZEhs:G7XWr9h7zUnHlnn2ZCs
Static task
static1
Behavioral task
behavioral1
Sample
2508c2951285a1739ce3f3bb51266ced8da3b38bf244cd5bc0d21a69280d36bb.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2508c2951285a1739ce3f3bb51266ced8da3b38bf244cd5bc0d21a69280d36bb
-
Size
4.1MB
-
MD5
b0ad905c9dc82ad025c9897ded2bc15b
-
SHA1
bda3c29d8a8f45cfcee8ac258415d4e5f2ec8e19
-
SHA256
2508c2951285a1739ce3f3bb51266ced8da3b38bf244cd5bc0d21a69280d36bb
-
SHA512
56ee0c317280e69be311e8fd1fc944236b107005bbbb3c2481e6b67517fdbe94a51378e3a216b87063d61593c38e8334bad785a6fcfec13fe24b9904da516d15
-
SSDEEP
98304:GfV9Xpq/Nr9h7yiBXUeur8+6kv7/RnnOPzZEhs:G7XWr9h7zUnHlnn2ZCs
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1