Extracted

• • Target
    a56481f1b2b6f46167861f473c76b500
  • Size 4.4MB
  • SHA256 de3960dcd27488e6dbf99a0cbbfeb49a1071086adc64a547460a31fc0e668b9b
  • MD5 a56481f1b2b6f46167861f473c76b500
  • SHA1 54c197630201ec81831d96686dd92f1c86e557a6
  • SHA512 2fb0ffa912c0e5a68fb2de38fc24983ab1fae4afc83b1bb377cd9dc892d4d51b0cbd0571d30641be456315cd1381def5352bd192d5b4bc1e9b3aab18e3228231
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2