Overview

overview

10

Static

static

ac10e43cbf...e1.exe

windows7_x64

10

ac10e43cbf...e1.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac10e43cbfc02ecb3278104fd75c5ec8817100682a711318c473fd66287e23e1

  • Size

    5.0MB

  • Sample

    220515-1s9e7sgge4

  • MD5

    9b3acfbcc7329bb4076590bcf06405ea

  • SHA1

    080381c640febaac9b4fa902f6c890efe4d27f15

  • SHA256

    ac10e43cbfc02ecb3278104fd75c5ec8817100682a711318c473fd66287e23e1

  • SHA512

    7d0378f6203a70c5215bbc8a7d334256224a026ad1a32b796f866d08efb9c5e9df0ac3039bcbe18e53c07280e62a108a7188c511c4377a241ef2efd071f0a2f9

Score
10/10
gluptebadropperevasionloadersuricata

Malware Config

Targets

    • Target

      ac10e43cbfc02ecb3278104fd75c5ec8817100682a711318c473fd66287e23e1

    • Size

      5.0MB

    • MD5

      9b3acfbcc7329bb4076590bcf06405ea

    • SHA1

      080381c640febaac9b4fa902f6c890efe4d27f15

    • SHA256

      ac10e43cbfc02ecb3278104fd75c5ec8817100682a711318c473fd66287e23e1

    • SHA512

      7d0378f6203a70c5215bbc8a7d334256224a026ad1a32b796f866d08efb9c5e9df0ac3039bcbe18e53c07280e62a108a7188c511c4377a241ef2efd071f0a2f9

    Score
    10/10
    gluptebadropperevasionloadersuricata

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba Payload

    • suricata: ET MALWARE Glupteba CnC Domain in DNS Lookup

      suricata: ET MALWARE Glupteba CnC Domain in DNS Lookup

      suricata

    • Modifies Windows Firewall

      evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks