Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b4355c35ecde8ef4d8e7dc4a5104fb1ca2bccb44c2f7ce749d4a25efaddd304

  • Size

    4.3MB

  • Sample

    210926-gec1asechq

  • MD5

    f9e9e5629cbdf561882e1386588fc615

  • SHA1

    efa9b6f8caadf50e21fd1647c8f094b2ba1f26b4

  • SHA256

    1b4355c35ecde8ef4d8e7dc4a5104fb1ca2bccb44c2f7ce749d4a25efaddd304

  • SHA512

    79a47776c07d4f6e0dcf1cc0b1b4e18895f3ed1a8493c96f756904c7d1eabdf6fd321985aed4d15361f9f2fc9d8f313348e06aab96d9c2102ec51fcc7b9e8eba

Score
10/10
gluptebametasploitbackdoordropperloadertrojan

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      1b4355c35ecde8ef4d8e7dc4a5104fb1ca2bccb44c2f7ce749d4a25efaddd304

    • Size

      4.3MB

    • MD5

      f9e9e5629cbdf561882e1386588fc615

    • SHA1

      efa9b6f8caadf50e21fd1647c8f094b2ba1f26b4

    • SHA256

      1b4355c35ecde8ef4d8e7dc4a5104fb1ca2bccb44c2f7ce749d4a25efaddd304

    • SHA512

      79a47776c07d4f6e0dcf1cc0b1b4e18895f3ed1a8493c96f756904c7d1eabdf6fd321985aed4d15361f9f2fc9d8f313348e06aab96d9c2102ec51fcc7b9e8eba

    Score
    10/10
    gluptebametasploitbackdoordropperloadertrojan

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks