General

  • Target

    66fbd0d108deb35f95573c71450dc4e3a4341b8df12b377c56e3f7be07d9a6bd

  • Size

    4.1MB

  • Sample

    240518-z62rvagf57

  • MD5

    939ee58b3e5bb32699cbf795c3410efe

  • SHA1

    a0d993cf7cbf6515d451c489cdfb0248fa68bf09

  • SHA256

    66fbd0d108deb35f95573c71450dc4e3a4341b8df12b377c56e3f7be07d9a6bd

  • SHA512

    2c812ecfa7202c04654099ba8aec74d7690c82aa2003db8a8def809464b7a7da1f46a12309ae73c6b4f58bea789de8480afa74f5b71b2d799ebd492c7707ac4b

  • SSDEEP

    98304:7mSOHuT7egJLhRTCVEkOCdqjiWtSbuAFmh92D:70ObLh9WfG/tSdeo

Malware Config

Targets

    • Target

      66fbd0d108deb35f95573c71450dc4e3a4341b8df12b377c56e3f7be07d9a6bd

    • Size

      4.1MB

    • MD5

      939ee58b3e5bb32699cbf795c3410efe

    • SHA1

      a0d993cf7cbf6515d451c489cdfb0248fa68bf09

    • SHA256

      66fbd0d108deb35f95573c71450dc4e3a4341b8df12b377c56e3f7be07d9a6bd

    • SHA512

      2c812ecfa7202c04654099ba8aec74d7690c82aa2003db8a8def809464b7a7da1f46a12309ae73c6b4f58bea789de8480afa74f5b71b2d799ebd492c7707ac4b

    • SSDEEP

      98304:7mSOHuT7egJLhRTCVEkOCdqjiWtSbuAFmh92D:70ObLh9WfG/tSdeo

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

    • Glupteba payload

    • Modifies Windows Firewall

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks