Extracted

• • Target
    bd267e80514550638fdba8a967f1547e
  • Size 4.5MB
  • SHA256 07d9cc94a464997e7b768b4186bec3897e22650577d73aa6f9f924ba769648ea
  • MD5 bd267e80514550638fdba8a967f1547e
  • SHA1 df3e45a9c4b1255f61879a60c2fef7b7e3735885
  • SHA512 bae5d3d47401c668993a57f44133af668b903e16449f60a34120b071cde8cdf39f27b8fb64ad11bea8e532c5ed4fca32b4b1898d771055850627c68f5f6e1f31
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2