Extracted

• • Target
    ee280cdfedb6f9e496ee788ad51f3c87
  • Size 4.4MB
  • SHA256 d64cda4b27aee29a8f491b125d83bc8b55d483db8884b14fc1a3ef20fe1717eb
  • MD5 ee280cdfedb6f9e496ee788ad51f3c87
  • SHA1 ffac74324234b5b910d593ccb7ad7d7433cdc220
  • SHA512 63aba0d0847aeb4f9deafa1d4eed182bdf4f0facf0daa991453592894a9f9521496b25006cc7ba09bbd0c451626c3ee2b10a2cd47d500fb091b02090ebaadb4e
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2