Extracted

• • Target
    bf9449b1015153fe62837aad93d2eba8
  • Size 4.4MB
  • SHA256 68d83afa2dc4272e54c4ebb1ab8981e7f00442dfe6e66c8b7299c30a230be997
  • MD5 bf9449b1015153fe62837aad93d2eba8
  • SHA1 e1637f3aa2d78d91ffa7409ca0823c96d2eb8941
  • SHA512 687984a9c1f2a6c6a15b62b20ac7447ff5a3d7db3b22fc52e2c0b0500ac000e9efe6886481aac94103e38184fb9eb92319f46e31eeefb6e614662a5e2e97acab
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2