Extracted

• • Target
    190df0ed733b7c6cec66ec57331c3f47
  • Size 4.5MB
  • SHA256 8bb0c75f554647d27173b3d8b2e63abba3670fb7972b6856cbca89f1eda96c6d
  • MD5 190df0ed733b7c6cec66ec57331c3f47
  • SHA1 3fabeb10c0f3249abeacecd2a8a8f75d5bdc04ba
  • SHA512 13f1c1b863558c82fe3be67f27da370a1226e0b1cd3cd206621eb5cde94012f7a69d09a01237e209bef511293f371733734af4af7f4571313befd9a9cd793cd0
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2