General
-
Target
78f4348538f91b2478732eacd738a769346e7a934ec1e9ab76d85026690aea45
-
Size
4.2MB
-
Sample
240426-3kvyysfc6x
-
MD5
63feeb772586c161478ced51d7d7bed6
-
SHA1
be1af7ff6eea3c4517cb1777bf20f69f145b9875
-
SHA256
78f4348538f91b2478732eacd738a769346e7a934ec1e9ab76d85026690aea45
-
SHA512
96e0ace5c704688c17097046e5cba0030bde1ef9c020065a5639e2880e2ce36a6154f4f84e055470cd1569850b5581465aac4f6f4244bc8c6a43f893d28766df
-
SSDEEP
98304:AkAjdDPAeC2B02wyEqB4QU18FBwX92iJvUa6o386BoSeiwZU4mjQxQu:ruPAV2B0NRqB88FqJvA6j4GQv
Static task
static1
Behavioral task
behavioral1
Sample
78f4348538f91b2478732eacd738a769346e7a934ec1e9ab76d85026690aea45.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
78f4348538f91b2478732eacd738a769346e7a934ec1e9ab76d85026690aea45
-
Size
4.2MB
-
MD5
63feeb772586c161478ced51d7d7bed6
-
SHA1
be1af7ff6eea3c4517cb1777bf20f69f145b9875
-
SHA256
78f4348538f91b2478732eacd738a769346e7a934ec1e9ab76d85026690aea45
-
SHA512
96e0ace5c704688c17097046e5cba0030bde1ef9c020065a5639e2880e2ce36a6154f4f84e055470cd1569850b5581465aac4f6f4244bc8c6a43f893d28766df
-
SSDEEP
98304:AkAjdDPAeC2B02wyEqB4QU18FBwX92iJvUa6o386BoSeiwZU4mjQxQu:ruPAV2B0NRqB88FqJvA6j4GQv
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1