Analysis

  • max time kernel
    1s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-05-2024 04:26

General

  • Target

    bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36.exe

  • Size

    4.1MB

  • MD5

    393ae5f8768a1ee7c0be487ed7de4b91

  • SHA1

    f1ff2e591b450b20f62469767215527fdab4bce7

  • SHA256

    bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36

  • SHA512

    3c32ee01456b6d6ad8bc29f68113077d429aec93c37f6e1e99e80bd013358713535ed6d24bfc00084c12bb2dc4762be9cfda7fbf87dcf738a8543ada453faec1

  • SSDEEP

    98304:Z96GAmuNBigEkoqfZTwC6uGlBZNljS4jcC:ZI9hoq9wC6uGlB/xgC

Score
10/10

Malware Config

Signatures

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

  • Glupteba payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36.exe
    "C:\Users\Admin\AppData\Local\Temp\bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36.exe"
    1⤵
      PID:3224

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3224-1-0x0000000002930000-0x0000000002D2E000-memory.dmp

      Filesize

      4.0MB

    • memory/3224-2-0x0000000002D30000-0x000000000361B000-memory.dmp

      Filesize

      8.9MB

    • memory/3224-3-0x0000000000400000-0x0000000000D1C000-memory.dmp

      Filesize

      9.1MB