Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    491a59a09706b8235c5221799c0f6b045693f6e7c4ba0753e37902fbb1a17abb

  • Size

    4.3MB

  • Sample

    210926-2c4epafdd7

  • MD5

    0d2baff50a239053d5e1bd00160e60a8

  • SHA1

    7ecbaa51acb6295051ae70586f521c676e364843

  • SHA256

    491a59a09706b8235c5221799c0f6b045693f6e7c4ba0753e37902fbb1a17abb

  • SHA512

    d352c6ed74a672bd84f8dbb706f2738fcf698dd9efebf965f240f4853732a41067f8cbb39372873c92b32407c0f41697b6212566747fa40ac0f0ee9a088de852

Score
10/10
gluptebametasploitbackdoordropperloadertrojan

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      491a59a09706b8235c5221799c0f6b045693f6e7c4ba0753e37902fbb1a17abb

    • Size

      4.3MB

    • MD5

      0d2baff50a239053d5e1bd00160e60a8

    • SHA1

      7ecbaa51acb6295051ae70586f521c676e364843

    • SHA256

      491a59a09706b8235c5221799c0f6b045693f6e7c4ba0753e37902fbb1a17abb

    • SHA512

      d352c6ed74a672bd84f8dbb706f2738fcf698dd9efebf965f240f4853732a41067f8cbb39372873c92b32407c0f41697b6212566747fa40ac0f0ee9a088de852

    Score
    10/10
    gluptebametasploitbackdoordropperloadertrojan

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix

Tasks