General
- Target SecuriteInfo.com.W32.AIDetect.malware2.16955.19807
- Size 4.5MB
- Sample210623-37al746rrx
- SHA256 3ed60a60c3aeb99f383ef97de1581827c535d082cf9f33c5fe6ef572fc186a94
- MD5 04a39cdebcfc61e0eb742c73e4480333
- SHA1 00a8f84879951977471b681825cce0d6d917eb56
- SHA512 48e700c78795c8cbfbb28050bbbacfb4b0ee29ec5ee8ce618a0792945051ca48f5b96e2d5802d0a855b841be1278388a0ffd993cf31699a0cfefb5eb86723dfa
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.AIDetect.malware2.16955.19807.exe
Resource
win7v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/single_exec
Targets
-
- Target SecuriteInfo.com.W32.AIDetect.malware2.16955.19807
- Size 4.5MB
- SHA256 3ed60a60c3aeb99f383ef97de1581827c535d082cf9f33c5fe6ef572fc186a94
- MD5 04a39cdebcfc61e0eb742c73e4480333
- SHA1 00a8f84879951977471b681825cce0d6d917eb56
- SHA512 48e700c78795c8cbfbb28050bbbacfb4b0ee29ec5ee8ce618a0792945051ca48f5b96e2d5802d0a855b841be1278388a0ffd993cf31699a0cfefb5eb86723dfa
- MD5 SHA1 SHA512
-
Glupteba Payload
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of NtCreateUserProcessOtherParentProcess