General

  • Target

    aae9095befa0c354c452d37ecd078fb1d67877af43c15d46ae40b5fe1282dc78

  • Size

    4.3MB

  • Sample

    210926-tkb2eafbb3

  • MD5

    d34f349e5ddd752454a1aafefed65f15

  • SHA1

    eef8b8d29b3e5070f1d19e20383d15f815b5ec5c

  • SHA256

    aae9095befa0c354c452d37ecd078fb1d67877af43c15d46ae40b5fe1282dc78

  • SHA512

    c766b441171b73e7963942e8a74c969b953db45d92e1b606b586d3e2e512b68866f3aa1506434dbe6c78ee842418fc2ab972ccd94083bead6f0381df517e60df

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      aae9095befa0c354c452d37ecd078fb1d67877af43c15d46ae40b5fe1282dc78

    • Size

      4.3MB

    • MD5

      d34f349e5ddd752454a1aafefed65f15

    • SHA1

      eef8b8d29b3e5070f1d19e20383d15f815b5ec5c

    • SHA256

      aae9095befa0c354c452d37ecd078fb1d67877af43c15d46ae40b5fe1282dc78

    • SHA512

      c766b441171b73e7963942e8a74c969b953db45d92e1b606b586d3e2e512b68866f3aa1506434dbe6c78ee842418fc2ab972ccd94083bead6f0381df517e60df

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks