General

  • Target

    834c4e0f871325c4fa72f50f1e0546676d396cde4fbb068440a6aec87a02121a

  • Size

    4.2MB

  • Sample

    240417-3hlx9shf78

  • MD5

    b97555e87f15535456f7c419378e5f0b

  • SHA1

    29571e4dc0341a9a68ef00ecbd94d0ea7bb3f28d

  • SHA256

    834c4e0f871325c4fa72f50f1e0546676d396cde4fbb068440a6aec87a02121a

  • SHA512

    cbe22adc1e4620d759604114cc70c4b93fa8637262907446e07f27b5f720d206b9e96c7da4ec6e46ff06229d87fd1dd24ed740781316a9e67b07c3631384125a

  • SSDEEP

    98304:KkZ2HRjDxUqNRSWw/fdG0ya8lhbNKCN+OMuHRmn++CozeYuDK:LZ2x3CqNcHdGTLNp+F+8elDK

Malware Config

Targets

    • Target

      834c4e0f871325c4fa72f50f1e0546676d396cde4fbb068440a6aec87a02121a

    • Size

      4.2MB

    • MD5

      b97555e87f15535456f7c419378e5f0b

    • SHA1

      29571e4dc0341a9a68ef00ecbd94d0ea7bb3f28d

    • SHA256

      834c4e0f871325c4fa72f50f1e0546676d396cde4fbb068440a6aec87a02121a

    • SHA512

      cbe22adc1e4620d759604114cc70c4b93fa8637262907446e07f27b5f720d206b9e96c7da4ec6e46ff06229d87fd1dd24ed740781316a9e67b07c3631384125a

    • SSDEEP

      98304:KkZ2HRjDxUqNRSWw/fdG0ya8lhbNKCN+OMuHRmn++CozeYuDK:LZ2x3CqNcHdGTLNp+F+8elDK

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba payload

    • Modifies Windows Firewall

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks