Extracted

• • Target

    2025-04-15_c79b6242e09daafe3c2d4b487f5f7244_black-basta_cobalt-strike_elex_poet-rat_snatch

  • Size

    9.2MB

  • MD5

    c79b6242e09daafe3c2d4b487f5f7244

  • SHA1

    9b6105e44b98c3104ef0666dd8922b5f56d1c733

  • SHA256

    13fe7c2e493a5febed609c56b1e95469000a94e24da27b58427fb551f9f0a424

  • SHA512

    d2d883f71cfcc85ae8fc45f105f5037cc158c9b5aff994607100d91c8887bff147b439c13f4197c7d32890ad80adfc12639f0afaa35971e824d7f76ce0dd9de1

  • SSDEEP

    98304:dzoGFZcAgqFx18a00OuGHJ/XxMLvhhZytTVhg5iq+C:Zo+Zcg1hGBxMLphwVhGWC

  Score

  10^/10

  gluptebametasploitbackdoordiscoverydropperloadertrojanupx

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba family

    glupteba

  • Glupteba payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1