General

  • Target
    b02c623065357bddf51529cbc437a703
  • Size 4.5MB
  • Sample210912-wcv6esceb4
  • SHA256 eb4694ad3a62d2e007c0f0aba545d57af7dcb41b78504401bafda510d85d9a4f
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • metasploit

Version
  • windows/single_exec

Targets

    • Target
      b02c623065357bddf51529cbc437a703
    • Size 4.5MB
    • SHA256 eb4694ad3a62d2e007c0f0aba545d57af7dcb41b78504401bafda510d85d9a4f
    • MD5 SHA1 SHA512
    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v6

Tasks