glupteba | tmpwespnv6x

General

Target
tmpwespnv6x
Size 8.5MB
Sample260602-lw3phaav7z
SHA256 aa950d7aacb150fcdbe076ef31b1e129bac52de1146487f49e3186b680b1fdfd
MD5 8f804bc9e681f3c492ae0320db8a9046
SHA1 851236e23ec18f801b31c27fcdc8192c7f1f0c70
SHA512 de6aee1256ea3abb62aba449081f22e3880b8e1b00a4afdcdfcd2adc1f8e503fa93b71e9a465639303771c767c96a7ac2284f6cc4db324ec26be6e7bab1c2f47
SSDEEP 98304:s/tkNUvApWlmDJY8hv9zQC1nj/GqhZytTD5iq:s/iNUr+v1BhwN
TLSH
T14E967C81F9AB44F9EA03453089A3923FA731750A8335CFCBDA900E97FD276E11A36755
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: Glupteba
Glupteba is a modular loader written in Golang with various components.
loader dropper glupteba

Glupteba payload 1 IoCs

resource	yara_rule
sample	family_glupteba

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpwespnv6x

IMPHASH 1cd364a9e949d5ecebd6c614e64bc545
SHA256 aa950d7aacb150fcdbe076ef31b1e129bac52de1146487f49e3186b680b1fdfd
MD5 8f804bc9e681f3c492ae0320db8a9046
SHA1 851236e23ec18f801b31c27fcdc8192c7f1f0c70
SHA512 de6aee1256ea3abb62aba449081f22e3880b8e1b00a4afdcdfcd2adc1f8e503fa93b71e9a465639303771c767c96a7ac2284f6cc4db324ec26be6e7bab1c2f47
SSDEEP 98304:s/tkNUvApWlmDJY8hv9zQC1nj/GqhZytTD5iq:s/iNUr+v1BhwN
TLSH
T14E967C81F9AB44F9EA03453089A3923FA731750A8335CFCBDA900E97FD276E11A36755
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

6

Entry point

333392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths