Extracted

• • Target
    9e6101374059307b27e54ac179b27070
  • Size 4.5MB
  • SHA256 40507efbaa22e1db92c98d29ede1cdb9f68dcca04bf9558fe96e90ed18e847c1
  • MD5 9e6101374059307b27e54ac179b27070
  • SHA1 af92248314ee96cb7f4828d484d8c7a97ff7a45f
  • SHA512 8e755b598804ae7e5602d8c32b6b4016cd2400f5e37a31628953b6942ff122bdffe387c62750ad1e287abe2d89b9ca7f2fc7aa85be69c0e8ec5b15636c3dc1b5
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2