glupteba | 407c70f0c1a1e34503dae74dd973cf037d607e3c4deb8f063d33f2142f1baf71 | Triage™

Login
Reports

Overview

overview

Static

static

89c47e27be...18.exe

windows7-x64

89c47e27be...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
89c47e27bec5a374476ffaf92ab2b6d2_JaffaCakes118
Size 6.9MB
Sample240601-jfk4eaeb61
SHA256 407c70f0c1a1e34503dae74dd973cf037d607e3c4deb8f063d33f2142f1baf71
MD5 89c47e27bec5a374476ffaf92ab2b6d2
SHA1 6486a7db83b1be2ed5ef7239262d22508d3e075a
SHA512 f0c65570b230236b2dda4e326122f54b8174fd2d17c6e5c9ddb1b0f80c9733f023ba86252400dc0bc9ee314fb4023bd1dac6fda6297e17fe18493d175f2634bc
SSDEEP 98304:kzHf7vmorbC/yNwFC6TJZcE94Kcj3sA/Ibt1YcyDXs:+Hzvpr6FHt4Kc+NIs
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

glupteba dropper evasion loader persistence trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

89c47e27bec5a374476ffaf92ab2b6d2_JaffaCakes118.exe

Resource

win7-20240215-en

windows7-x64

14 signatures

150 seconds

glupteba dropper evasion loader persistence trojan

Behavioral task

behavioral2

Sample

89c47e27bec5a374476ffaf92ab2b6d2_JaffaCakes118.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

11 signatures

150 seconds

glupteba dropper evasion loader persistence

Malware Config

Targets

- Target
  89c47e27bec5a374476ffaf92ab2b6d2_JaffaCakes118
- Size 6.9MB
- SHA256 407c70f0c1a1e34503dae74dd973cf037d607e3c4deb8f063d33f2142f1baf71
- MD5 89c47e27bec5a374476ffaf92ab2b6d2
- SHA1 6486a7db83b1be2ed5ef7239262d22508d3e075a
- SHA512 f0c65570b230236b2dda4e326122f54b8174fd2d17c6e5c9ddb1b0f80c9733f023ba86252400dc0bc9ee314fb4023bd1dac6fda6297e17fe18493d175f2634bc
- SSDEEP 98304:kzHf7vmorbC/yNwFC6TJZcE94Kcj3sA/Ibt1YcyDXs:+Hzvpr6FHt4Kc+NIs
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

glupteba dropper evasion loader persistence trojan
- Glupteba
  Glupteba is a modular loader written in Golang with various components.
  loader dropper glupteba
- Glupteba payload
- Windows security bypass
  evasion trojan
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gluptebadropperevasionloaderpersistencetrojan

behavioral2

gluptebadropperevasionloaderpersistence

© 2018-2026

Terms | Privacy