General

  • Target

    a469a0252820bbbaff3808d00d5d58683dacef3fc326efa63433ee6d040f7181

  • Size

    4.3MB

  • Sample

    210925-wxrnqsdgb4

  • MD5

    5ea05865fda4235a91b7dc6d9c22a81a

  • SHA1

    4f9319c7484e66343f72f11945c74e3d1eaea4e4

  • SHA256

    a469a0252820bbbaff3808d00d5d58683dacef3fc326efa63433ee6d040f7181

  • SHA512

    2fadf9fe415af8ae519651173e9065254487c63870b2af7fd626b42bfc1fd106b334d370fd218e990769840db2b04530da10512fc6f97c3e0412aabc042ab7f2

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      a469a0252820bbbaff3808d00d5d58683dacef3fc326efa63433ee6d040f7181

    • Size

      4.3MB

    • MD5

      5ea05865fda4235a91b7dc6d9c22a81a

    • SHA1

      4f9319c7484e66343f72f11945c74e3d1eaea4e4

    • SHA256

      a469a0252820bbbaff3808d00d5d58683dacef3fc326efa63433ee6d040f7181

    • SHA512

      2fadf9fe415af8ae519651173e9065254487c63870b2af7fd626b42bfc1fd106b334d370fd218e990769840db2b04530da10512fc6f97c3e0412aabc042ab7f2

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks