glupteba | c5120bd41a0da73e236cb8b8eaef6331a6d7a787b616a5d842efbcd794bfd6e4 | Triage

Submit
Reports

Overview

overview

Static

static

1

cryptolaemus

windows10-2004-x64

cryptolaemus

windows11-21h2-x64

Sharing

General

Target

c5120bd41a0da73e236cb8b8eaef6331a6d7a787b616a5d842efbcd794bfd6e4
Size

4.1MB
Sample

240424-txq14adc3s
MD5

770dcf67f02bc05f62f6efbfb114c652
SHA1

103f33dd662314339bd4d21a386e8a377ed5afe3
SHA256

c5120bd41a0da73e236cb8b8eaef6331a6d7a787b616a5d842efbcd794bfd6e4
SHA512

9a376f917bcebceb3f849fefd86b59e33b501f58b60f322f014d38737afae1fb14724d6a9ac2d534fd33590da54a8445c6f4b683e6279d26f3c4eec3c2a7c6bb
SSDEEP

98304:1FddrpuoRE7tl1yJ8vae/QmLpm2XHwIZYQzHZc5g5rp30lCUr:fLdBQ1yJ8Sedm2XHUQNc5Xgi

Score

10^/10

glupteba dropper evasion loader upx

Static task

static1

Behavioral task

behavioral1

Sample

c5120bd41a0da73e236cb8b8eaef6331a6d7a787b616a5d842efbcd794bfd6e4.exe

Resource

win10v2004-20240412-en

glupteba dropper evasion loader upx

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

c5120bd41a0da73e236cb8b8eaef6331a6d7a787b616a5d842efbcd794bfd6e4.exe

Resource

win11-20240412-en

glupteba dropper evasion loader upx

windows11-21h2-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  c5120bd41a0da73e236cb8b8eaef6331a6d7a787b616a5d842efbcd794bfd6e4
- Size
  
  4.1MB
- MD5
  
  770dcf67f02bc05f62f6efbfb114c652
- SHA1
  
  103f33dd662314339bd4d21a386e8a377ed5afe3
- SHA256
  
  c5120bd41a0da73e236cb8b8eaef6331a6d7a787b616a5d842efbcd794bfd6e4
- SHA512
  
  9a376f917bcebceb3f849fefd86b59e33b501f58b60f322f014d38737afae1fb14724d6a9ac2d534fd33590da54a8445c6f4b683e6279d26f3c4eec3c2a7c6bb
- SSDEEP
  
  98304:1FddrpuoRE7tl1yJ8vae/QmLpm2XHwIZYQzHZc5g5rp30lCUr:fLdBQ1yJ8Sedm2XHUQNc5Xgi
Score

10^/10

glupteba dropper evasion loader upx
- Glupteba
  Glupteba is a modular loader written in Golang with various components.
  loader dropper glupteba
- Glupteba payload
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Create or Modify System Process

Windows Service

Scheduled Task/Job

Privilege Escalation

Create or Modify System Process

Windows Service

Scheduled Task/Job

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gluptebadropperevasionloaderupx

behavioral2

gluptebadropperevasionloaderupx

© 2018-2024

Terms | Privacy