General

  • Target
    SecuriteInfo.com.W32.AIDetect.malware2.16955.19807
  • Size 4.5MB
  • Sample210623-37al746rrx
  • SHA256 3ed60a60c3aeb99f383ef97de1581827c535d082cf9f33c5fe6ef572fc186a94
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • metasploit

Version
  • windows/single_exec

Targets

    • Target
      SecuriteInfo.com.W32.AIDetect.malware2.16955.19807
    • Size 4.5MB
    • SHA256 3ed60a60c3aeb99f383ef97de1581827c535d082cf9f33c5fe6ef572fc186a94
    • MD5 SHA1 SHA512
    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Matrix

Tasks