General
-
Target
396f7af568e70d713e9b7dd0cb92ce97105b392d62bac878a62505491cf09af4
-
Size
4.1MB
-
Sample
240515-lqd4ysbf4w
-
MD5
33441d515f31a4b2c61a28e3acda3e4d
-
SHA1
cf7dc26ba832cf4834b205f46f7b72ce137f1b42
-
SHA256
396f7af568e70d713e9b7dd0cb92ce97105b392d62bac878a62505491cf09af4
-
SHA512
539616da34f6c70b3566f2c10c9992e1bc74f1e18163a399d71de36dd3a5df8ba7fe3d8431542b83837d1cd93dbda10535f6efd3712e89897af6128c843f4010
-
SSDEEP
98304:brCNiB8ow0tjGRwMUUAJnC6DPNgwm1X3ykRpk8yR82N6j:brCy8l0I4UGC6Dg3yk88npj
Static task
static1
Behavioral task
behavioral1
Sample
396f7af568e70d713e9b7dd0cb92ce97105b392d62bac878a62505491cf09af4.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
396f7af568e70d713e9b7dd0cb92ce97105b392d62bac878a62505491cf09af4
-
Size
4.1MB
-
MD5
33441d515f31a4b2c61a28e3acda3e4d
-
SHA1
cf7dc26ba832cf4834b205f46f7b72ce137f1b42
-
SHA256
396f7af568e70d713e9b7dd0cb92ce97105b392d62bac878a62505491cf09af4
-
SHA512
539616da34f6c70b3566f2c10c9992e1bc74f1e18163a399d71de36dd3a5df8ba7fe3d8431542b83837d1cd93dbda10535f6efd3712e89897af6128c843f4010
-
SSDEEP
98304:brCNiB8ow0tjGRwMUUAJnC6DPNgwm1X3ykRpk8yR82N6j:brCy8l0I4UGC6Dg3yk88npj
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1