General
- Target fc839b52295376b80121272b9857ab9c
- Size 4.4MB
- Sample210909-evta4safgr
- SHA256 3e44aaf53dce4bee54658ad0a4ceecf11d73809de59eaad7c652c0e816304bd5
- MD5 fc839b52295376b80121272b9857ab9c
- SHA1 845a3b0c19da889da6e20e93171a85e3fdd16728
- SHA512 0c1617b4ee1dcb2d732e0cb9eee56d57e5e2129b96a551e06e67ab77514407914275d412f8481484e9d3160548f2991e3d2ed6c6e74452dc863f31ddf75ad2cd
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
fc839b52295376b80121272b9857ab9c.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/single_exec
Targets
-
- Target fc839b52295376b80121272b9857ab9c
- Size 4.4MB
- SHA256 3e44aaf53dce4bee54658ad0a4ceecf11d73809de59eaad7c652c0e816304bd5
- MD5 fc839b52295376b80121272b9857ab9c
- SHA1 845a3b0c19da889da6e20e93171a85e3fdd16728
- SHA512 0c1617b4ee1dcb2d732e0cb9eee56d57e5e2129b96a551e06e67ab77514407914275d412f8481484e9d3160548f2991e3d2ed6c6e74452dc863f31ddf75ad2cd
- MD5 SHA1 SHA512
-
Glupteba Payload
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of NtCreateUserProcessOtherParentProcess