Overview

overview

10

Static

static

1

JC_541274c...48.exe

windows7-x64

10

JC_541274c...48.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    JC_541274c087f15cc4726b81b3a50e10be16e84a359e81f2c67b6519a01846b548

  • Size

    4.2MB

  • Sample

    231013-dcp1asdc78

  • MD5

    c2816a91e09f12c1ad386b2071b35017

  • SHA1

    aff48f2e7324b60c650a20f1c673762251a3dfbc

  • SHA256

    541274c087f15cc4726b81b3a50e10be16e84a359e81f2c67b6519a01846b548

  • SHA512

    0391c9f20498fbdfad40f4d1704387844f53d4ee4acda88a1f0e32dc94781b1c7da89e9e7073dc918712d8df46afe3fff4164053c9b2b0c0bc73b4462d8fe925

  • SSDEEP

    98304:vE8oGTUTR8cfRGnGQzDj+G/LM2pzkjMB7zRUS8o0TjiHwa:YGYXizD6G/JzCai9dEwa

Score
10/10
gluptebadropperevasionloader

Malware Config

Targets

    • Target

      JC_541274c087f15cc4726b81b3a50e10be16e84a359e81f2c67b6519a01846b548

    • Size

      4.2MB

    • MD5

      c2816a91e09f12c1ad386b2071b35017

    • SHA1

      aff48f2e7324b60c650a20f1c673762251a3dfbc

    • SHA256

      541274c087f15cc4726b81b3a50e10be16e84a359e81f2c67b6519a01846b548

    • SHA512

      0391c9f20498fbdfad40f4d1704387844f53d4ee4acda88a1f0e32dc94781b1c7da89e9e7073dc918712d8df46afe3fff4164053c9b2b0c0bc73b4462d8fe925

    • SSDEEP

      98304:vE8oGTUTR8cfRGnGQzDj+G/LM2pzkjMB7zRUS8o0TjiHwa:YGYXizD6G/JzCai9dEwa

    Score
    10/10
    gluptebadropperevasionloader

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba payload

    • Modifies Windows Firewall

      evasion

    • Modifies boot configuration data using bcdedit

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks