Extracted

• • Target
    75e0392cb5d6ffad9d202aafbeaeab04
  • Size 4.4MB
  • SHA256 bda5266623b0fa7db75f2b4f4dcad50162b92ca3494e52b8305c48f0e4fa8a22
  • MD5 75e0392cb5d6ffad9d202aafbeaeab04
  • SHA1 12015c6d454a5e34eab9e0fd0d1947b257780736
  • SHA512 01463e1d1897d4993ff9ec850656b936c834fbcd8879dfa2a9b4067161243759c6e04a650cb9d0946d0cbcb2dce63f323e13afc3c7754b2c356cd6d21023dbad
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2