Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c2a03435599e583ec3f2678df849c0bc7ec0cd204bf5b21c3353800d6a6f1b7

  • Size

    4.3MB

  • Sample

    210925-zg9fdsdhd7

  • MD5

    9d0374b05ab1c1f2ad3b6ffd941059ca

  • SHA1

    1d7022c89d68feb34ad8b4f7ebdce7573e6cce75

  • SHA256

    3c2a03435599e583ec3f2678df849c0bc7ec0cd204bf5b21c3353800d6a6f1b7

  • SHA512

    5f5ff8b8194e6f2fb468795d05205315db6a757eb6c40dd6003bc92dac836c6c2efce667d00f48e4c5fe7f13d51ef24d32c6be5260e0cf0b619841a1e0d2b9e1

Score
10/10
gluptebametasploitbackdoordropperloadertrojan

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      3c2a03435599e583ec3f2678df849c0bc7ec0cd204bf5b21c3353800d6a6f1b7

    • Size

      4.3MB

    • MD5

      9d0374b05ab1c1f2ad3b6ffd941059ca

    • SHA1

      1d7022c89d68feb34ad8b4f7ebdce7573e6cce75

    • SHA256

      3c2a03435599e583ec3f2678df849c0bc7ec0cd204bf5b21c3353800d6a6f1b7

    • SHA512

      5f5ff8b8194e6f2fb468795d05205315db6a757eb6c40dd6003bc92dac836c6c2efce667d00f48e4c5fe7f13d51ef24d32c6be5260e0cf0b619841a1e0d2b9e1

    Score
    10/10
    gluptebametasploitbackdoordropperloadertrojan

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks