Analysis
-
max time kernel
141s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
09-05-2024 10:02
General
-
Target
b6c3849b717558f2c869c17641f984bdb838dd5edf51fe83440b08821d27a954.exe
-
Size
4.1MB
-
MD5
81a730c82a5e68e6ea9864ad2b2b928a
-
SHA1
c7429cf599d98627cab9ff96caefbc3a1b4da60e
-
SHA256
b6c3849b717558f2c869c17641f984bdb838dd5edf51fe83440b08821d27a954
-
SHA512
f915418257be3eca0d644e398854f3328ae9168f6c27eeacf2edc343ea17559961d27977c6386ccda8c0bdb7c66e179267113ffdaee3973ca25d76ddb7ddc5f1
-
SSDEEP
98304:IMi5XVbaSoP0nn92GKBGloZzP4CjVUqkCDgteLHWmp38ur:H6XZaSoP//4CRUqkCDgsHW8r
Score
10/10
Malware Config
Signatures
-
Glupteba
Glupteba is a modular loader written in Golang with various components.
-
Glupteba payload 4 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b6c3849b717558f2c869c17641f984bdb838dd5edf51fe83440b08821d27a954.exe"C:\Users\Admin\AppData\Local\Temp\b6c3849b717558f2c869c17641f984bdb838dd5edf51fe83440b08821d27a954.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3800 -s 2682⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3800 -ip 38001⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.0MB
-
Filesize
8.9MB
-
Filesize
9.1MB
-
Filesize
8.9MB
-
Filesize
42.9MB