General
-
Target
48200d67cc15595516b01ae0c0486302a9eef979ae3c5be2e825b687053b11a0
-
Size
4.2MB
-
Sample
230607-mbsjgaab7x
-
MD5
c7ce23e7e7ce6b26feba88deaaa21ab4
-
SHA1
f848e9382b9b2a3c6077108ef683a3d492e7339f
-
SHA256
48200d67cc15595516b01ae0c0486302a9eef979ae3c5be2e825b687053b11a0
-
SHA512
5e799680478a5fbae9583045926947f436abd26481ff3b15adfe91c4db497e42750a9bb33bc6096e608da4a182713ef3da278bcd0158eaee06026f2ef2c9bf48
-
SSDEEP
98304:nxwPu98IQXpACiy6CclaxsM3CJSQ1+gsp/1AQGn9jO:xwPu98IQXaCBwa/CJH+gsdOF9y
Static task
static1
Behavioral task
behavioral1
Sample
48200d67cc15595516b01ae0c0486302a9eef979ae3c5be2e825b687053b11a0.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
48200d67cc15595516b01ae0c0486302a9eef979ae3c5be2e825b687053b11a0
-
Size
4.2MB
-
MD5
c7ce23e7e7ce6b26feba88deaaa21ab4
-
SHA1
f848e9382b9b2a3c6077108ef683a3d492e7339f
-
SHA256
48200d67cc15595516b01ae0c0486302a9eef979ae3c5be2e825b687053b11a0
-
SHA512
5e799680478a5fbae9583045926947f436abd26481ff3b15adfe91c4db497e42750a9bb33bc6096e608da4a182713ef3da278bcd0158eaee06026f2ef2c9bf48
-
SSDEEP
98304:nxwPu98IQXpACiy6CclaxsM3CJSQ1+gsp/1AQGn9jO:xwPu98IQXaCBwa/CJH+gsdOF9y
Score10/10-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-