glupteba | 5b543527b4b8a1d52a9f459a5103d435b6bc38df56af7cd42b2c28020f56098f | Triage

Submit
Reports

Overview

overview

Static

static

1

winprofile

windows7-x64

winprofile

windows10-1703-x64

Sharing

General

Target

5b543527b4b8a1d52a9f459a5103d435b6bc38df56af7cd42b2c28020f56098f
Size

4.2MB
Sample

231225-fnlhcsbecn
MD5

7d4d5598fa708bdb171c82a4b720a8ab
SHA1

54e8db02463f8c2e763f1f4a3aac9f6bdb019c90
SHA256

5b543527b4b8a1d52a9f459a5103d435b6bc38df56af7cd42b2c28020f56098f
SHA512

0f6a64dbcb85542af858f6178b9b9d63506c447a82310bda1c2d5db62fde2e0a56698a9fdd82113a829bd4d3689946a4c4ce8688a6851b205320450d20bb3530
SSDEEP

98304:eonnMgHusXXbQYbgv8h6wxlh0UQ1LNwBMA:LnnMgHZsYbtk5fA

Score

10^/10

glupteba dropper evasion loader upx

Static task

static1

Behavioral task

behavioral1

Sample

5b543527b4b8a1d52a9f459a5103d435b6bc38df56af7cd42b2c28020f56098f.exe

Resource

win7-20231129-en

glupteba dropper evasion loader

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral2

Sample

5b543527b4b8a1d52a9f459a5103d435b6bc38df56af7cd42b2c28020f56098f.exe

Resource

win10-20231220-en

glupteba dropper evasion loader upx

windows10-1703-x64

6 signatures

300 seconds

Malware Config

Targets

- Target
  
  5b543527b4b8a1d52a9f459a5103d435b6bc38df56af7cd42b2c28020f56098f
- Size
  
  4.2MB
- MD5
  
  7d4d5598fa708bdb171c82a4b720a8ab
- SHA1
  
  54e8db02463f8c2e763f1f4a3aac9f6bdb019c90
- SHA256
  
  5b543527b4b8a1d52a9f459a5103d435b6bc38df56af7cd42b2c28020f56098f
- SHA512
  
  0f6a64dbcb85542af858f6178b9b9d63506c447a82310bda1c2d5db62fde2e0a56698a9fdd82113a829bd4d3689946a4c4ce8688a6851b205320450d20bb3530
- SSDEEP
  
  98304:eonnMgHusXXbQYbgv8h6wxlh0UQ1LNwBMA:LnnMgHZsYbtk5fA
Score

10^/10

glupteba dropper evasion loader upx
- Glupteba
  Glupteba is a modular loader written in Golang with various components.
  loader dropper glupteba
- Glupteba payload
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Modifies boot configuration data using bcdedit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Create or Modify System Process

Windows Service

Scheduled Task/Job

Privilege Escalation

Create or Modify System Process

Windows Service

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gluptebadropperevasionloader

behavioral2

gluptebadropperevasionloaderupx

© 2018-2025

Terms | Privacy