General

  • Target
    fc839b52295376b80121272b9857ab9c
  • Size 4.4MB
  • Sample210909-evta4safgr
  • SHA256 3e44aaf53dce4bee54658ad0a4ceecf11d73809de59eaad7c652c0e816304bd5
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • metasploit

Version
  • windows/single_exec

Targets

    • Target
      fc839b52295376b80121272b9857ab9c
    • Size 4.4MB
    • SHA256 3e44aaf53dce4bee54658ad0a4ceecf11d73809de59eaad7c652c0e816304bd5
    • MD5 SHA1 SHA512
    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v6

Tasks