General
- Target tmp377puejf
- Size 6.1MB
- Sample260522-1tw69sft2q
- SHA256 983aed9a3588545ef98ae76e4efb75d5191c05cb7b46c1632c52141c454ee4fa
- MD5 2649779bbc9fe522bdcb478c3d10e869
- SHA1 63ec34cf748e18a68c3599f4b8903e0ddff1a6e8
- SHA512 cce9b9df636fb8302c9c8c6653aa21dd2fcefa3335723141c03504a767c50d94ceca77fc56abe725486e64843625c42874ef3fa8765557531ae581020bc7944f
- SSDEEP 196608:t2BaQK2Pp0xGNF2xoKHy+nN91UFIxw+ii:t2RKEp0xGH2CKBnN5fn
- TLSH T1ED56334272C960E3D14379BC851BD6E54EA2BC1913B220CB6FF64DB3CB195E98D36326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
tmp377puejf.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
tmp377puejf.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
tmp377puejf.exe
Resource
win11-20260513-en
Malware Config
Targets
-
- Target tmp377puejf
- Size 6.1MB
- SHA256 983aed9a3588545ef98ae76e4efb75d5191c05cb7b46c1632c52141c454ee4fa
- MD5 2649779bbc9fe522bdcb478c3d10e869
- SHA1 63ec34cf748e18a68c3599f4b8903e0ddff1a6e8
- SHA512 cce9b9df636fb8302c9c8c6653aa21dd2fcefa3335723141c03504a767c50d94ceca77fc56abe725486e64843625c42874ef3fa8765557531ae581020bc7944f
- SSDEEP 196608:t2BaQK2Pp0xGNF2xoKHy+nN91UFIxw+ii:t2RKEp0xGH2CKBnN5fn
- TLSH T1ED56334272C960E3D14379BC851BD6E54EA2BC1913B220CB6FF64DB3CB195E98D36326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Glupteba payload
-
Windows security bypass
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Windows security modification
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
3Disable or Modify System Firewall
1Disable or Modify Tools
2Modify Registry
4Subvert Trust Controls
2Install Root Certificate
2