Extracted

• • Target

    483615e15cc9d4e87654e5a7a39803dd

  • Size

    4.5MB

  • MD5

    483615e15cc9d4e87654e5a7a39803dd

  • SHA1

    1f4326980f1ad5b046791c5c3c3329602a00beb0

  • SHA256

    65d1221aa98162f07b0a2116a00a5bebb9a1667a5dd04b9479cebd9b117e8625

  • SHA512

    3adf4c46533be5d8e903bd769d62340a62b70a214bbef890ce920a9371590aa12139aaaf30ce7c739f1dca3344be7558dffd9a33a40514ee7d60fed51286cb5b

  • SSDEEP

    98304:Qjf/cWS3aJKDmEEMZ8r2OwsKpdHt4PEUTdoMuVPBtH:3wKDtDOqOwTpdHEECuMuVP3

  Score

  10^/10

  gluptebametasploitbackdoordropperevasionloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Modifies Windows Firewall

    evasion

  • Modifies boot configuration data using bcdedit

  behavioral1behavioral2