Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-23...ch.exe

windows7-x64

1

2024-05-23...ch.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_aff3275e4e81bca7a81895e3cf135abf_snatch

  • Size

    8.9MB

  • MD5

    aff3275e4e81bca7a81895e3cf135abf

  • SHA1

    4846145136b515a11b6b7c9a0db5f5ff22d757a6

  • SHA256

    fc8282107ccad6841509915e9762083cd4215e8413b732b22048f9e99ed9d61e

  • SHA512

    f5a259a7110da6b442ac419264156b0f2d663f51651d60ba02a29761fe8ad3888b9d6f7f0c6e7109d758a9ad532f9875aa6330dfc658ae22b74447000d25aeaf

  • SSDEEP

    98304:0yP/Ui/TbjMC27sjjmcfwhZytTD5iqvg:nkup/mcohwNw

Score
10/10
glupteba

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
  • Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
  • Glupteba family
    glupteba
  • Glupteba payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_aff3275e4e81bca7a81895e3cf135abf_snatch
    .exe windows:6 windows x86 arch:x86

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.