General
-
Target
7c0e1377b5a7c386f69b4e20bd83316457c5ba36607bb13016a0b76e782e57c5
-
Size
4.2MB
-
Sample
240419-x5ppsadc78
-
MD5
bc162161fbbacbb8e9cc0ad7601df247
-
SHA1
732d1aa81ed81ffb8c64e824d1516ef73ba44183
-
SHA256
7c0e1377b5a7c386f69b4e20bd83316457c5ba36607bb13016a0b76e782e57c5
-
SHA512
c73d1fa6958e5c3cbffe21ee527411e12427b76e8e4dee3297dc552bdaecf91a39e1a000d941a0c3fac51f1b60b0217b7dc01494709ecd9d1fd67e37ecb4ea52
-
SSDEEP
98304:btwUIgr6Tu/hivXD0fl0IvZVjhgp1+mYFjvUcmYnimsjZaHey:Jw6rquKXDtU1Y2GYniVjUHj
Static task
static1
Behavioral task
behavioral1
Sample
7c0e1377b5a7c386f69b4e20bd83316457c5ba36607bb13016a0b76e782e57c5.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
7c0e1377b5a7c386f69b4e20bd83316457c5ba36607bb13016a0b76e782e57c5
-
Size
4.2MB
-
MD5
bc162161fbbacbb8e9cc0ad7601df247
-
SHA1
732d1aa81ed81ffb8c64e824d1516ef73ba44183
-
SHA256
7c0e1377b5a7c386f69b4e20bd83316457c5ba36607bb13016a0b76e782e57c5
-
SHA512
c73d1fa6958e5c3cbffe21ee527411e12427b76e8e4dee3297dc552bdaecf91a39e1a000d941a0c3fac51f1b60b0217b7dc01494709ecd9d1fd67e37ecb4ea52
-
SSDEEP
98304:btwUIgr6Tu/hivXD0fl0IvZVjhgp1+mYFjvUcmYnimsjZaHey:Jw6rquKXDtU1Y2GYniVjUHj
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1