General
-
Target
4073b096bac399b8181223445bb4454def6e42baba0d353d330104794aa3b99c
-
Size
4.1MB
-
Sample
240511-nkejmsha46
-
MD5
35a539825a4681c8ab05848a65ea4d34
-
SHA1
9bd82dffd1c0924230aaee04c4e91a6a4ccb1d46
-
SHA256
4073b096bac399b8181223445bb4454def6e42baba0d353d330104794aa3b99c
-
SHA512
45d8fa8efdfac61ea39b6e6be2193fc2ed1232eec8be4f20cb12c8596bd0281ec21c1e2931ac65b3863aa91d007c8ca95a967084c9bac0917d1c7938ae7ca1d7
-
SSDEEP
98304:ValdxVYbeltggr6p7qKtgoJu9O6Qxc6qPeInuZKahKn+3Qj:6xq6ggrt/os9O/WxuFhK+Aj
Static task
static1
Behavioral task
behavioral1
Sample
4073b096bac399b8181223445bb4454def6e42baba0d353d330104794aa3b99c.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
4073b096bac399b8181223445bb4454def6e42baba0d353d330104794aa3b99c
-
Size
4.1MB
-
MD5
35a539825a4681c8ab05848a65ea4d34
-
SHA1
9bd82dffd1c0924230aaee04c4e91a6a4ccb1d46
-
SHA256
4073b096bac399b8181223445bb4454def6e42baba0d353d330104794aa3b99c
-
SHA512
45d8fa8efdfac61ea39b6e6be2193fc2ed1232eec8be4f20cb12c8596bd0281ec21c1e2931ac65b3863aa91d007c8ca95a967084c9bac0917d1c7938ae7ca1d7
-
SSDEEP
98304:ValdxVYbeltggr6p7qKtgoJu9O6Qxc6qPeInuZKahKn+3Qj:6xq6ggrt/os9O/WxuFhK+Aj
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1