General
-
Target
46a07036e7f4a7a9b9e83c62281e29b960186d98a5200f290a9e290ddb966e25
-
Size
4.2MB
-
Sample
240419-yggvpsdf96
-
MD5
cf78bdce714d9d73d36bdac256d2ae72
-
SHA1
e7cf53cfb2ef876f02426ecc122f8414dcf6bf1a
-
SHA256
46a07036e7f4a7a9b9e83c62281e29b960186d98a5200f290a9e290ddb966e25
-
SHA512
746c90754c04cd0b50e09fa6cd09816f2b57f031e87a5f4c6ea3ef582ae460129ae132aef7cb3a020cd930ac89108f8325447fbc86af96a1a63aa45709181eca
-
SSDEEP
98304:btwUIgr6Tu/hivXD0fl0IvZVjhgp1+mYFjvUcmYnimsjZaHeb:Jw6rquKXDtU1Y2GYniVjUHO
Static task
static1
Behavioral task
behavioral1
Sample
46a07036e7f4a7a9b9e83c62281e29b960186d98a5200f290a9e290ddb966e25.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
46a07036e7f4a7a9b9e83c62281e29b960186d98a5200f290a9e290ddb966e25
-
Size
4.2MB
-
MD5
cf78bdce714d9d73d36bdac256d2ae72
-
SHA1
e7cf53cfb2ef876f02426ecc122f8414dcf6bf1a
-
SHA256
46a07036e7f4a7a9b9e83c62281e29b960186d98a5200f290a9e290ddb966e25
-
SHA512
746c90754c04cd0b50e09fa6cd09816f2b57f031e87a5f4c6ea3ef582ae460129ae132aef7cb3a020cd930ac89108f8325447fbc86af96a1a63aa45709181eca
-
SSDEEP
98304:btwUIgr6Tu/hivXD0fl0IvZVjhgp1+mYFjvUcmYnimsjZaHeb:Jw6rquKXDtU1Y2GYniVjUHO
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1