Extracted

• • Target
    Your-File-Is-Ready-To-Download-PLND.exe
  • Size 4.4MB
  • SHA256 2db2cc193feadebfc2a1847f97ba91070840b51cc9729a3208cf288afa71f19a
  • MD5 af27e975705dd7973a1e49e782ad05cd
  • SHA1 a9651c701f2436a9981d3af532500e25ca8244fa
  • SHA512 c0daf2b592649395b6e0ae1a13807f71a56cf7f603c682ca99710c01b86c55c87a1728ec81b3a9137b0247a0be607ba55850b2f011ceb24985dc7888a4c17029
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2