glupteba | f0664519abba86b60d974e10c86d0d32e8237ff626c664fea63183ecb5d722a3 | Triage

Submit
Reports

Overview

overview

Static

static

3

39c005bba9...18.exe

windows7-x64

39c005bba9...18.exe

windows10-2004-x64

Sharing

General

Target

39c005bba9ffbcfc011cf31c7cb2eedc_JaffaCakes118
Size

5.0MB
Sample

240729-f9zxwavgrj
MD5

39c005bba9ffbcfc011cf31c7cb2eedc
SHA1

988d69ab81c84f1c2b6d0943fe01bd85889b8d75
SHA256

f0664519abba86b60d974e10c86d0d32e8237ff626c664fea63183ecb5d722a3
SHA512

96116b9cf19ec66dcda6a02e9fad418a7e19658e07140534e0537e8707baf1a488cdb5b82196914dc089cede064b3138b2df478e5fb4733b08fbbff51113639a
SSDEEP

98304:AVWc1NtyRPKlkkCyTXEB4Oxa/ig1IJ9+/+PwwTW8Jpmr2KHvpVdnqSqeJOm:AVWFh+kaTXEB4O4/V1B/+PXTRaq6xfo

Score

10^/10

glupteba discovery dropper evasion loader

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

39c005bba9ffbcfc011cf31c7cb2eedc_JaffaCakes118.exe

Resource

win7-20240729-en

glupteba discovery dropper evasion loader

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

39c005bba9ffbcfc011cf31c7cb2eedc_JaffaCakes118.exe

Resource

win10v2004-20240709-en

glupteba discovery dropper evasion loader

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  39c005bba9ffbcfc011cf31c7cb2eedc_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  39c005bba9ffbcfc011cf31c7cb2eedc
- SHA1
  
  988d69ab81c84f1c2b6d0943fe01bd85889b8d75
- SHA256
  
  f0664519abba86b60d974e10c86d0d32e8237ff626c664fea63183ecb5d722a3
- SHA512
  
  96116b9cf19ec66dcda6a02e9fad418a7e19658e07140534e0537e8707baf1a488cdb5b82196914dc089cede064b3138b2df478e5fb4733b08fbbff51113639a
- SSDEEP
  
  98304:AVWc1NtyRPKlkkCyTXEB4Oxa/ig1IJ9+/+PwwTW8Jpmr2KHvpVdnqSqeJOm:AVWFh+kaTXEB4O4/V1B/+PXTRaq6xfo
Score

10^/10

glupteba discovery dropper evasion loader
- Glupteba
  Glupteba is a modular loader written in Golang with various components.
  loader dropper glupteba
- Glupteba payload
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gluptebadiscoverydropperevasionloader

behavioral2

gluptebadiscoverydropperevasionloader

© 2018-2024

Terms | Privacy