Extracted

• • Target
    SecuriteInfo.com.Variant.Fragtor.9689.2386.3266
  • Size 4.4MB
  • SHA256 d179e667e2790673f30e69bebaa0bcd4d4b9bf68503611b6d26b278447cd4ae1
  • MD5 ec3c4df5fe2b9466fc320be2d360229a
  • SHA1 db18f8f18826c12f060f7349412713194a6f354c
  • SHA512 1f21100f348c0a0eacbba5f7a4a94488aef81fe788067ec579aad270605a66f192d9255b60f3c03d5c5d4cc5c95bf06a2f44986dab4e53c210a96b8cc32d0427
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2