Extracted

• • Target
    SecuriteInfo.com.Trojan.Rootkit.22046.28365.29797
  • Size 4.5MB
  • SHA256 bf348bb3548e36fc86c7cd916f08be6f2b6e870ba20475e9aa660bf81cccb525
  • MD5 802dd842bcc934b9f1a01bafe7f19d29
  • SHA1 b73f69a5411f487e8c285f6bf0e429a58052559e
  • SHA512 3318bcf25d4f84d9a644f9f44fc0550b04621ecccb89a6987cfafbff07d758bec74a3330e502734d3d76e5baee5f5bdf997cee9c67e36a4c7cfbd7912c7c7775
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2