Extracted

• • Target
    04b752011095ff4ad220fc275ca098b7
  • Size 4.5MB
  • SHA256 b40d3f5493f03dd8fa6efc0d3f02c7f67d3ca76daa45dbec75887cb6eb013461
  • MD5 04b752011095ff4ad220fc275ca098b7
  • SHA1 e40b2216e7c7fe37dd84d09bcc8a14dc5221baed
  • SHA512 19040bf6632b2cacd2e541d5c3daaf8f6e603c834d20c604926c2d8e8e34f80f52328dc368010dd7c3d4f839ec284f2bbe7179b007c680d80fd755b89fe99ee5
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2