Extracted

• • Target
    c9459eed4d7b0b155c0ae5a64748f5ce
  • Size 4.5MB
  • SHA256 0b07fe8c554ff364d42e3311b10a79ba6ed1b47e35763e45c924bafeb8d0d50a
  • MD5 c9459eed4d7b0b155c0ae5a64748f5ce
  • SHA1 05a75df014d108bf8d111db26caf34fffb4cfe44
  • SHA512 bb9dfb1234636c7edc41db8ce84dd727d5c398a36f7bb9d82969a4f7978af590f0d87b07de391ee1b49266a63a794f5d07128cb5d7e40e434e90e964446c8440
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2