General

  • Target

    da8b797d3b7c999316c155051b8e743bee9e642f2576a0c0032fb79a09c37989

  • Size

    4.3MB

  • Sample

    210926-jmj5paeebl

  • MD5

    f107669a60976617a74c2ad10765e292

  • SHA1

    05ba9f6dc0a4fce97725ea2e39865e466c98a6da

  • SHA256

    da8b797d3b7c999316c155051b8e743bee9e642f2576a0c0032fb79a09c37989

  • SHA512

    afe5b26041e72da4043cb3ba98ebad9712849121aaae267470b72a8f2f4b7c45b1e84bcb4f4891be85ef1ca50b4dbd996787108308acbb1ec506e37a075e52b3

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      da8b797d3b7c999316c155051b8e743bee9e642f2576a0c0032fb79a09c37989

    • Size

      4.3MB

    • MD5

      f107669a60976617a74c2ad10765e292

    • SHA1

      05ba9f6dc0a4fce97725ea2e39865e466c98a6da

    • SHA256

      da8b797d3b7c999316c155051b8e743bee9e642f2576a0c0032fb79a09c37989

    • SHA512

      afe5b26041e72da4043cb3ba98ebad9712849121aaae267470b72a8f2f4b7c45b1e84bcb4f4891be85ef1ca50b4dbd996787108308acbb1ec506e37a075e52b3

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks