General
-
Target
9c51bd337c9bfe8c711d52608a4588756fdf0765887e84c68532eb70b466b923
-
Size
4.2MB
-
Sample
240420-gajx2sae4y
-
MD5
49cddfa0864198b8c9a424d713c441a9
-
SHA1
0e2b1519a10724126bef9e861e31d754abca2a0f
-
SHA256
9c51bd337c9bfe8c711d52608a4588756fdf0765887e84c68532eb70b466b923
-
SHA512
7fc5e4b1707794058cf430b1d22eb5d66b945dd0131f2452777170650dcc7f2dc0befee43c3d9726d2b6ec81666026bac94c136f0179bd251bc7afe5f3fe064c
-
SSDEEP
98304:tLQYZG/dgZ86BiJBiuHE0xNIsAKMiZ9poPnhJgyiGr:tf8gKxTxapLMoPnzgk
Static task
static1
Behavioral task
behavioral1
Sample
9c51bd337c9bfe8c711d52608a4588756fdf0765887e84c68532eb70b466b923.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
9c51bd337c9bfe8c711d52608a4588756fdf0765887e84c68532eb70b466b923
-
Size
4.2MB
-
MD5
49cddfa0864198b8c9a424d713c441a9
-
SHA1
0e2b1519a10724126bef9e861e31d754abca2a0f
-
SHA256
9c51bd337c9bfe8c711d52608a4588756fdf0765887e84c68532eb70b466b923
-
SHA512
7fc5e4b1707794058cf430b1d22eb5d66b945dd0131f2452777170650dcc7f2dc0befee43c3d9726d2b6ec81666026bac94c136f0179bd251bc7afe5f3fe064c
-
SSDEEP
98304:tLQYZG/dgZ86BiJBiuHE0xNIsAKMiZ9poPnhJgyiGr:tf8gKxTxapLMoPnzgk
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1