glupteba | 2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38 | Triage™

Login
Reports

Overview

overview

Static

static

3

tmp0ot2fq5w.exe

windows10-ltsc_2021-x64

tmp0ot2fq5w.exe

windows10-2004-x64

tmp0ot2fq5w.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
tmp0ot2fq5w
Size 4.1MB
Sample260602-nrmtlabz5v
SHA256 2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38
MD5 3235e09f951b1991dd3935f5a29600f7
SHA1 56940be29ae63271fb71f9dc8bda3a2bbc93c712
SHA512 76b6f6ee29d703af006c20e40d9d3b978e073cb044c7b14f30060ec5db9b48a359aa105a88baa5377599837aef9ca0487060c74d16076162923bd24c65b85552
SSDEEP 98304:XcdeRIr4nukHCik85j+NwnM+q3fl3j9KyXCR+Pj0o9v62F0L:MKIr3kq85uJjJXspL
TLSH
T1AC163336B436C835C1A6057A8F70E3012AB376390862B2473F9816DE597A5AD5EF730F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

glupteba defense_evasion discovery dropper execution loader persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmp0ot2fq5w.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

5 signatures

150 seconds

defense_evasion discovery dropper execution glupteba loader persistence

Behavioral task

behavioral2

Sample

tmp0ot2fq5w.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

defense_evasion discovery dropper execution glupteba loader persistence

Behavioral task

behavioral3

Sample

tmp0ot2fq5w.exe

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

150 seconds

defense_evasion discovery dropper execution glupteba loader persistence

Malware Config

Targets

- Target
  tmp0ot2fq5w
- Size 4.1MB
- SHA256 2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38
- MD5 3235e09f951b1991dd3935f5a29600f7
- SHA1 56940be29ae63271fb71f9dc8bda3a2bbc93c712
- SHA512 76b6f6ee29d703af006c20e40d9d3b978e073cb044c7b14f30060ec5db9b48a359aa105a88baa5377599837aef9ca0487060c74d16076162923bd24c65b85552
- SSDEEP 98304:XcdeRIr4nukHCik85j+NwnM+q3fl3j9KyXCR+Pj0o9v62F0L:MKIr3kq85uJjJXspL
- TLSH
  T1AC163336B436C835C1A6057A8F70E3012AB376390862B2473F9816DE597A5AD5EF730F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery dropper execution glupteba loader persistence
- Family: Glupteba
  Glupteba is a modular loader written in Golang with various components.
  loader dropper glupteba
- Glupteba payload
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Create or Modify System Process

Windows Service

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Create or Modify System Process

Windows Service

Scheduled Task/Job

Scheduled Task

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverydropperexecutiongluptebaloaderpersistence

behavioral2

defense_evasiondiscoverydropperexecutiongluptebaloaderpersistence

behavioral3

defense_evasiondiscoverydropperexecutiongluptebaloaderpersistence

© 2018-2026

Terms | Privacy