General

  • Target

    df6c03a48c36accf785cd3c92cb2c63cff2bdfef56eeb7b4994719378231fd2f

  • Size

    4.3MB

  • Sample

    210926-zt1n1sfda7

  • MD5

    d24a42719f9482447b38eea18a124d38

  • SHA1

    4c84918f81e63a31e836d780200704b67b538876

  • SHA256

    df6c03a48c36accf785cd3c92cb2c63cff2bdfef56eeb7b4994719378231fd2f

  • SHA512

    ed4ea7d1640ff371f61088e6b9539057317df11fb9d292a78ba7c3c1b0e251a44c7f214f401a0339d7fc8c9f007fba67ad6cf1980c16eef8180f5a074672ab04

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Targets

    • Target

      df6c03a48c36accf785cd3c92cb2c63cff2bdfef56eeb7b4994719378231fd2f

    • Size

      4.3MB

    • MD5

      d24a42719f9482447b38eea18a124d38

    • SHA1

      4c84918f81e63a31e836d780200704b67b538876

    • SHA256

      df6c03a48c36accf785cd3c92cb2c63cff2bdfef56eeb7b4994719378231fd2f

    • SHA512

      ed4ea7d1640ff371f61088e6b9539057317df11fb9d292a78ba7c3c1b0e251a44c7f214f401a0339d7fc8c9f007fba67ad6cf1980c16eef8180f5a074672ab04

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba Payload

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks