Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5db696e6c30d99085b3f446e2713b5b2903e47c584b935ebc8d1b3a8e0312e32

  • Size

    4.3MB

  • Sample

    210925-y5e11sdghj

  • MD5

    155b6831c5e93352df25dc91730acc31

  • SHA1

    222ff9a86989568abd0dcacedfe97f3cde4cd7ca

  • SHA256

    5db696e6c30d99085b3f446e2713b5b2903e47c584b935ebc8d1b3a8e0312e32

  • SHA512

    ef9ee9d5c85948459b68e0f3413dbbb44dd5a6e2fe005f70046d346ac6d963edeeecb9ff7cf290d32a63fb172a1fca1cfd70c17b6ee602ffcbbe8fdc6d961b31

Score
10/10
gluptebametasploitbackdoordropperloadertrojan

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      5db696e6c30d99085b3f446e2713b5b2903e47c584b935ebc8d1b3a8e0312e32

    • Size

      4.3MB

    • MD5

      155b6831c5e93352df25dc91730acc31

    • SHA1

      222ff9a86989568abd0dcacedfe97f3cde4cd7ca

    • SHA256

      5db696e6c30d99085b3f446e2713b5b2903e47c584b935ebc8d1b3a8e0312e32

    • SHA512

      ef9ee9d5c85948459b68e0f3413dbbb44dd5a6e2fe005f70046d346ac6d963edeeecb9ff7cf290d32a63fb172a1fca1cfd70c17b6ee602ffcbbe8fdc6d961b31

    Score
    10/10
    gluptebametasploitbackdoordropperloadertrojan

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks