General
-
Target
795fa896d54c6eed1eeb58c955e5a85a458d5fd85ccb1c7579998144360c5693
-
Size
4.2MB
-
Sample
240423-hzxe4sec93
-
MD5
7fcc0c82ca8eeeb80276807af89b3f47
-
SHA1
b218f631c1bd0bc2370fa629eeb5153a7a129e59
-
SHA256
795fa896d54c6eed1eeb58c955e5a85a458d5fd85ccb1c7579998144360c5693
-
SHA512
47d1b2dd22a25aac77f4ee476fc57eaaf7a102def7018ac45288e47c8af444ed2342388b35054fe31a4c02a177f7761a761bec82b96cc1acd9b809014d203c6d
-
SSDEEP
98304:OFDX2D7KpLLzZSxNcqBsKAQPNaC1l72v7lGIQS:YyOpLXMxNjBsKAgF1kz8IN
Static task
static1
Behavioral task
behavioral1
Sample
795fa896d54c6eed1eeb58c955e5a85a458d5fd85ccb1c7579998144360c5693.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
795fa896d54c6eed1eeb58c955e5a85a458d5fd85ccb1c7579998144360c5693
-
Size
4.2MB
-
MD5
7fcc0c82ca8eeeb80276807af89b3f47
-
SHA1
b218f631c1bd0bc2370fa629eeb5153a7a129e59
-
SHA256
795fa896d54c6eed1eeb58c955e5a85a458d5fd85ccb1c7579998144360c5693
-
SHA512
47d1b2dd22a25aac77f4ee476fc57eaaf7a102def7018ac45288e47c8af444ed2342388b35054fe31a4c02a177f7761a761bec82b96cc1acd9b809014d203c6d
-
SSDEEP
98304:OFDX2D7KpLLzZSxNcqBsKAQPNaC1l72v7lGIQS:YyOpLXMxNjBsKAgF1kz8IN
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1