glupteba | 476804818c271a7348be04cab0202750373ae6a2a25b7dba40cf5a3add4f9abc | Triage

Submit
Reports

Overview

overview

Static

static

1

cryptolaemus

windows10-2004-x64

cryptolaemus

windows11-21h2-x64

Sharing

General

Target

476804818c271a7348be04cab0202750373ae6a2a25b7dba40cf5a3add4f9abc
Size

4.1MB
Sample

240519-bxgtbabe63
MD5

c62a0d778eb1dc9f3ec8b390264fbded
SHA1

48c5b876b414a95bc7815cab4e0b95944b095154
SHA256

476804818c271a7348be04cab0202750373ae6a2a25b7dba40cf5a3add4f9abc
SHA512

ebdadc5f07602ed88787268a32881d01d8bf97c35fbf3901dd3f267b4c51312ec453c8d9b0ae74dd26485ac5392dba4ec039f1b02efef014370cc23cb24aa56b
SSDEEP

98304:yf+oTi6061rsx4yGF2uQjPQS21lHMnsqkLrDDcuTdH2a0g7PFZ:Bos8riuQnYS21lsngzdH/0gn

Score

10^/10

glupteba dropper evasion execution loader upx

Static task

static1

Behavioral task

behavioral1

Sample

476804818c271a7348be04cab0202750373ae6a2a25b7dba40cf5a3add4f9abc.exe

Resource

win10v2004-20240426-en

glupteba dropper evasion execution loader upx

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

476804818c271a7348be04cab0202750373ae6a2a25b7dba40cf5a3add4f9abc.exe

Resource

win11-20240426-en

glupteba dropper evasion execution loader upx

windows11-21h2-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  476804818c271a7348be04cab0202750373ae6a2a25b7dba40cf5a3add4f9abc
- Size
  
  4.1MB
- MD5
  
  c62a0d778eb1dc9f3ec8b390264fbded
- SHA1
  
  48c5b876b414a95bc7815cab4e0b95944b095154
- SHA256
  
  476804818c271a7348be04cab0202750373ae6a2a25b7dba40cf5a3add4f9abc
- SHA512
  
  ebdadc5f07602ed88787268a32881d01d8bf97c35fbf3901dd3f267b4c51312ec453c8d9b0ae74dd26485ac5392dba4ec039f1b02efef014370cc23cb24aa56b
- SSDEEP
  
  98304:yf+oTi6061rsx4yGF2uQjPQS21lHMnsqkLrDDcuTdH2a0g7PFZ:Bos8riuQnYS21lsngzdH/0gn
Score

10^/10

glupteba dropper evasion execution loader upx
- Glupteba
  Glupteba is a modular loader written in Golang with various components.
  loader dropper glupteba
- Glupteba payload
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Scheduled Task/Job

Persistence

Create or Modify System Process

Windows Service

Scheduled Task/Job

Privilege Escalation

Create or Modify System Process

Windows Service

Scheduled Task/Job

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gluptebadropperevasionexecutionloaderupx

behavioral2

gluptebadropperevasionexecutionloaderupx

© 2018-2025

Terms | Privacy