Overview

overview

10

Static

static

3

9b3acfbcc7...18.exe

windows7-x64

10

9b3acfbcc7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b3acfbcc7329bb4076590bcf06405ea_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240610-td4g3sscqc

  • MD5

    9b3acfbcc7329bb4076590bcf06405ea

  • SHA1

    080381c640febaac9b4fa902f6c890efe4d27f15

  • SHA256

    ac10e43cbfc02ecb3278104fd75c5ec8817100682a711318c473fd66287e23e1

  • SHA512

    7d0378f6203a70c5215bbc8a7d334256224a026ad1a32b796f866d08efb9c5e9df0ac3039bcbe18e53c07280e62a108a7188c511c4377a241ef2efd071f0a2f9

  • SSDEEP

    98304:OOmWCUAtacMcP75xJIaZKcrVjYjJ5xxg57Vx9YvXR6PNjTAz8HASWOK1:O3WWDMcP75xJIVJi7Vxu0PNQz8gfb

Score
10/10
gluptebadropperevasionloader

Malware Config

Targets

    • Target

      9b3acfbcc7329bb4076590bcf06405ea_JaffaCakes118

    • Size

      5.0MB

    • MD5

      9b3acfbcc7329bb4076590bcf06405ea

    • SHA1

      080381c640febaac9b4fa902f6c890efe4d27f15

    • SHA256

      ac10e43cbfc02ecb3278104fd75c5ec8817100682a711318c473fd66287e23e1

    • SHA512

      7d0378f6203a70c5215bbc8a7d334256224a026ad1a32b796f866d08efb9c5e9df0ac3039bcbe18e53c07280e62a108a7188c511c4377a241ef2efd071f0a2f9

    • SSDEEP

      98304:OOmWCUAtacMcP75xJIaZKcrVjYjJ5xxg57Vx9YvXR6PNjTAz8HASWOK1:O3WWDMcP75xJIVJi7Vxu0PNQz8gfb

    Score
    10/10
    gluptebadropperevasionloader

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba payload

    • Modifies Windows Firewall

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks