General

  • Target

    3e7e288a12fcd6af0edb906bd5928f7983dcaac758c9f311ec8d3961947082da

  • Size

    4.3MB

  • Sample

    210926-jnqzmaeeh5

  • MD5

    b5c4d5c106e52914d2f695d91b220e3d

  • SHA1

    922c2641f0bd76982b99a9ccfb0c063c92d0867a

  • SHA256

    3e7e288a12fcd6af0edb906bd5928f7983dcaac758c9f311ec8d3961947082da

  • SHA512

    ae61a5959332051897a46e0b031a010bbf0b4945e5300ba0d2254f5995b42cd0d266d276ad571d3177d6d23f82b3fd77b865840f8a2f294e10c0a2a3356ecb4a

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      3e7e288a12fcd6af0edb906bd5928f7983dcaac758c9f311ec8d3961947082da

    • Size

      4.3MB

    • MD5

      b5c4d5c106e52914d2f695d91b220e3d

    • SHA1

      922c2641f0bd76982b99a9ccfb0c063c92d0867a

    • SHA256

      3e7e288a12fcd6af0edb906bd5928f7983dcaac758c9f311ec8d3961947082da

    • SHA512

      ae61a5959332051897a46e0b031a010bbf0b4945e5300ba0d2254f5995b42cd0d266d276ad571d3177d6d23f82b3fd77b865840f8a2f294e10c0a2a3356ecb4a

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Tasks