Extracted

• • Target

    2654d11f2d3ce974e432ad1c84bcd1f7

  • Size

    4.5MB

  • MD5

    2654d11f2d3ce974e432ad1c84bcd1f7

  • SHA1

    053efdc46790dd1b49e93863df59c83c39342c8f

  • SHA256

    df52242510b70aa54d66b0626624066ece6f8bd5384aa4897778bddfae321c51

  • SHA512

    8b577ed49b7648d67ac7ad19cefdad52eb3665d42561e7b97034607ab1d0e7eb2d0fa22a3338717a2c19e12b9826c338e0f66fcdef3cc9ad6d105c95a0b00df7

  • SSDEEP

    98304:UvcNtBvoJc7I0r0fy0hqQRi69numaD09pJ6N5f1qlFBdWiBl5E1oz2tiuD:UkJtjr0fXRi65rwfCFTZteoz2B

  Score

  10^/10

  gluptebametasploitbackdoordropperevasionloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Modifies Windows Firewall

    evasion
  behavioral1behavioral2