General
-
Target
a4de3cc14a98709d16326aeecbb001247af0ee82f75960b9e94af80d47a02d97
-
Size
4.2MB
-
Sample
231208-ak4a4sgc54
-
MD5
a9408e13125f6d66c3b7b21ab066a36b
-
SHA1
a86f5db495f1ccb4a6ded38ff1c60dba1880aae3
-
SHA256
a4de3cc14a98709d16326aeecbb001247af0ee82f75960b9e94af80d47a02d97
-
SHA512
e088a504fd530bf579c31fb7f3f6e37354bafe4bd6a429233b7abb4e94823b9780ab3758bc785f3a963a3a0c5c0b9f88cdf843aa8e41e890a97d96ee05330a2d
-
SSDEEP
98304:OQAstcpk5ubaJwjfVgTujW5sw8stfSa6frVm9Xa:OQAsa6QEEfVusCBSa+rVm9K
Static task
static1
Malware Config
Targets
-
-
Target
a4de3cc14a98709d16326aeecbb001247af0ee82f75960b9e94af80d47a02d97
-
Size
4.2MB
-
MD5
a9408e13125f6d66c3b7b21ab066a36b
-
SHA1
a86f5db495f1ccb4a6ded38ff1c60dba1880aae3
-
SHA256
a4de3cc14a98709d16326aeecbb001247af0ee82f75960b9e94af80d47a02d97
-
SHA512
e088a504fd530bf579c31fb7f3f6e37354bafe4bd6a429233b7abb4e94823b9780ab3758bc785f3a963a3a0c5c0b9f88cdf843aa8e41e890a97d96ee05330a2d
-
SSDEEP
98304:OQAstcpk5ubaJwjfVgTujW5sw8stfSa6frVm9Xa:OQAsa6QEEfVusCBSa+rVm9K
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1