General

  • Target

    e260a1566b80fbe5e546c08d0ee2229f383d4c4beb85a45a0a8978c52a0fdf25

  • Size

    4.2MB

  • Sample

    231006-tl8rrsgd55

  • MD5

    9a4282a1c46ea395d0f593c470e159de

  • SHA1

    df0baae1f470902210d765efbe93d180ce9567c1

  • SHA256

    e260a1566b80fbe5e546c08d0ee2229f383d4c4beb85a45a0a8978c52a0fdf25

  • SHA512

    75a7d987f8a64215e404e67d4ddacb46922b7cee91773c76faf203135d905c2268d17fd839af0de747b0120974fd33df2b11eb0cf25c7818a181196750ad6472

  • SSDEEP

    98304:1+040w4TjOwb/q8r4bwkYM/AG5gNGHGIfsaLHC1VDUfZzKfG4h4vz:OaF/qKkYM/D+NGmsDLHC4f0/E

Malware Config

Targets

    • Target

      e260a1566b80fbe5e546c08d0ee2229f383d4c4beb85a45a0a8978c52a0fdf25

    • Size

      4.2MB

    • MD5

      9a4282a1c46ea395d0f593c470e159de

    • SHA1

      df0baae1f470902210d765efbe93d180ce9567c1

    • SHA256

      e260a1566b80fbe5e546c08d0ee2229f383d4c4beb85a45a0a8978c52a0fdf25

    • SHA512

      75a7d987f8a64215e404e67d4ddacb46922b7cee91773c76faf203135d905c2268d17fd839af0de747b0120974fd33df2b11eb0cf25c7818a181196750ad6472

    • SSDEEP

      98304:1+040w4TjOwb/q8r4bwkYM/AG5gNGHGIfsaLHC1VDUfZzKfG4h4vz:OaF/qKkYM/D+NGmsDLHC4f0/E

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba payload

    • Modifies Windows Firewall

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks