Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7702a80626eeded003011996ebdea16071ec5259d7988d2d064429874399aa30

  • Size

    4.3MB

  • Sample

    210926-tnk4gsfbc2

  • MD5

    fb8b4808ebeb8ad8a3ce25eb748abda3

  • SHA1

    1bfc4349045eacfd129a694ee3f4b197f745a02f

  • SHA256

    7702a80626eeded003011996ebdea16071ec5259d7988d2d064429874399aa30

  • SHA512

    20b90e1de7d7a4c399f1a8f213c23cde832a5d032c71ff3f2290043c256ab4ac7b30031f6dc973a757ba72e860a2fe8675df8192093276e800bcf7ec790f2c78

Score
10/10
gluptebametasploitbackdoordropperloadertrojan

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      7702a80626eeded003011996ebdea16071ec5259d7988d2d064429874399aa30

    • Size

      4.3MB

    • MD5

      fb8b4808ebeb8ad8a3ce25eb748abda3

    • SHA1

      1bfc4349045eacfd129a694ee3f4b197f745a02f

    • SHA256

      7702a80626eeded003011996ebdea16071ec5259d7988d2d064429874399aa30

    • SHA512

      20b90e1de7d7a4c399f1a8f213c23cde832a5d032c71ff3f2290043c256ab4ac7b30031f6dc973a757ba72e860a2fe8675df8192093276e800bcf7ec790f2c78

    Score
    10/10
    gluptebametasploitbackdoordropperloadertrojan

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1

MITRE ATT&CK Matrix

Tasks