General

  • Target

    294d39dc0a349f3caa943995e3214187d0b9f1fc17c2e95d99acc380ae067050

  • Size

    4.3MB

  • Sample

    210925-z889psdhg4

  • MD5

    1bcac3843c2cecf188c5182ec450a500

  • SHA1

    eef22630d6f9bc88049ed1d8fe7ad0ae3ad01c36

  • SHA256

    294d39dc0a349f3caa943995e3214187d0b9f1fc17c2e95d99acc380ae067050

  • SHA512

    4b3e79da15a2578835503a01eab3a7c02343c170397f981602dc2684aeeba0f0978b2b38ff0b24553b1983978fb4c75693c982d29842b83f470e897393b8ea49

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      294d39dc0a349f3caa943995e3214187d0b9f1fc17c2e95d99acc380ae067050

    • Size

      4.3MB

    • MD5

      1bcac3843c2cecf188c5182ec450a500

    • SHA1

      eef22630d6f9bc88049ed1d8fe7ad0ae3ad01c36

    • SHA256

      294d39dc0a349f3caa943995e3214187d0b9f1fc17c2e95d99acc380ae067050

    • SHA512

      4b3e79da15a2578835503a01eab3a7c02343c170397f981602dc2684aeeba0f0978b2b38ff0b24553b1983978fb4c75693c982d29842b83f470e897393b8ea49

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks