General
-
Target
5adcf97178cde6104de0bff9b725af1e1445ccc843257400dcca2fff5e454c9b
-
Size
4.2MB
-
Sample
240420-svthrscb31
-
MD5
2b596a8638205ca939c5a25260b86acc
-
SHA1
418a5b80b82440d26e5e8f0955bbf02f739decac
-
SHA256
5adcf97178cde6104de0bff9b725af1e1445ccc843257400dcca2fff5e454c9b
-
SHA512
7a417ba0a3e3ef70d8466bea1e7d1a031b426d76fc0ef80cdcc28dc96988c364992446dd0c878caa0cfef79fdfd12cd4ace152cbf896a43e58b355d90cd32737
-
SSDEEP
49152:JKOdvREmi8iTwPpeYBnAu4QJI7RESGN2UNQnUyHdr+bW0USBgrsqhT/DWSjgq2Sb:AOLEfT6eYBhfhWV+b2vbWNq2SbuhRi
Static task
static1
Behavioral task
behavioral1
Sample
5adcf97178cde6104de0bff9b725af1e1445ccc843257400dcca2fff5e454c9b.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
5adcf97178cde6104de0bff9b725af1e1445ccc843257400dcca2fff5e454c9b
-
Size
4.2MB
-
MD5
2b596a8638205ca939c5a25260b86acc
-
SHA1
418a5b80b82440d26e5e8f0955bbf02f739decac
-
SHA256
5adcf97178cde6104de0bff9b725af1e1445ccc843257400dcca2fff5e454c9b
-
SHA512
7a417ba0a3e3ef70d8466bea1e7d1a031b426d76fc0ef80cdcc28dc96988c364992446dd0c878caa0cfef79fdfd12cd4ace152cbf896a43e58b355d90cd32737
-
SSDEEP
49152:JKOdvREmi8iTwPpeYBnAu4QJI7RESGN2UNQnUyHdr+bW0USBgrsqhT/DWSjgq2Sb:AOLEfT6eYBhfhWV+b2vbWNq2SbuhRi
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1