General

  • Target

    341c7fa771ad9d005482e8da6310813a53ec3b0a0ceda84b503804d666fa5ea0

  • Size

    4.3MB

  • Sample

    210926-nc13nsefem

  • MD5

    41f354412b975406192a4448c9ac9616

  • SHA1

    4077587c04bc361d4b7f60c5aa99d34993505e35

  • SHA256

    341c7fa771ad9d005482e8da6310813a53ec3b0a0ceda84b503804d666fa5ea0

  • SHA512

    73913377801f852b5ed17a38a6ac99a45da1c02f8e39c5f5bc00874edf44ff00b084d7cacd28c54ef5b8c5813d9ad0bfc083495ce10ee1af675a8ec47e2e5ce2

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      341c7fa771ad9d005482e8da6310813a53ec3b0a0ceda84b503804d666fa5ea0

    • Size

      4.3MB

    • MD5

      41f354412b975406192a4448c9ac9616

    • SHA1

      4077587c04bc361d4b7f60c5aa99d34993505e35

    • SHA256

      341c7fa771ad9d005482e8da6310813a53ec3b0a0ceda84b503804d666fa5ea0

    • SHA512

      73913377801f852b5ed17a38a6ac99a45da1c02f8e39c5f5bc00874edf44ff00b084d7cacd28c54ef5b8c5813d9ad0bfc083495ce10ee1af675a8ec47e2e5ce2

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks