Extracted

• • Target
    de959372fd94e1ae8261f7f3a430e194
  • Size 4.3MB
  • SHA256 58a7195eaf6e6d8c366dd038689da7697e0acfc5d0d160fb89d63f1658e997b8
  • MD5 de959372fd94e1ae8261f7f3a430e194
  • SHA1 87fb20c67f050be1517ef13c463d8d68e4efe81c
  • SHA512 4ac7c20ac92eb087cda7585172dc28927d2dd395a4cc4b3511ca9a58350101a1743476cb85f82a34ae05d7aef4251d84c8c91e8caab731b10b369a2694a3f3c9
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2