Extracted

• • Target
    2dcc86138724694767fb6be79e33cd5b
  • Size 4.3MB
  • SHA256 fa5ae1658989d1d11e8100a350d08ed016e81e1ab007a271f8c73182bd3d6ccb
  • MD5 2dcc86138724694767fb6be79e33cd5b
  • SHA1 e327db37a6cc241be003dd1a23884f37cc1a4537
  • SHA512 b09ad6cba4048ecf5641d244aa068b9a4012d729ed63591801a971ce0b2ed4c4d3b26cada064b0498b7c29ffcad978ef437a9bfe50795ae47132a01870e44d56
  • MD5 SHA1 SHA512

  Score

  10^/10

  gluptebametasploitbackdoordropperloadertrojan

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba Payload

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2