Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d33772defc5835f420428fce2beddc18cbc641d180992bc35da12260d606074c

  • Size

    4.3MB

  • Sample

    210926-1x27pafdd2

  • MD5

    a9f44b3ddb77c04e15feadd2cb981c4c

  • SHA1

    66c59a6269e403d0c37a3b3559346ebfe283c54e

  • SHA256

    d33772defc5835f420428fce2beddc18cbc641d180992bc35da12260d606074c

  • SHA512

    245827d86a9ac7c9b356bee78428e9dab5890b90b9bd9e783f3ff6ec778ff3b42ee0298aba90eed01a8e17a4c55d6d5fe2c13a4b1560914448490b3eb02133c8

Score
10/10
gluptebametasploitbackdoordropperloadertrojan

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      d33772defc5835f420428fce2beddc18cbc641d180992bc35da12260d606074c

    • Size

      4.3MB

    • MD5

      a9f44b3ddb77c04e15feadd2cb981c4c

    • SHA1

      66c59a6269e403d0c37a3b3559346ebfe283c54e

    • SHA256

      d33772defc5835f420428fce2beddc18cbc641d180992bc35da12260d606074c

    • SHA512

      245827d86a9ac7c9b356bee78428e9dab5890b90b9bd9e783f3ff6ec778ff3b42ee0298aba90eed01a8e17a4c55d6d5fe2c13a4b1560914448490b3eb02133c8

    Score
    10/10
    gluptebametasploitbackdoordropperloadertrojan

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix

Tasks