General
- Target b02c623065357bddf51529cbc437a703
- Size 4.5MB
- Sample210912-wcv6esceb4
- SHA256 eb4694ad3a62d2e007c0f0aba545d57af7dcb41b78504401bafda510d85d9a4f
- MD5 b02c623065357bddf51529cbc437a703
- SHA1 ca96bdc34d7f1938f216d51159d1a5f866bb3535
- SHA512 ceb0d16a3ae535539a1c71aefcdb2959cc066879c2d3e86b434a6a29fb00085e3712a6437d54949167cdf4ebb701d099352968bf84674911a96a332e46a671f5
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
b02c623065357bddf51529cbc437a703.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/single_exec
Targets
-
- Target b02c623065357bddf51529cbc437a703
- Size 4.5MB
- SHA256 eb4694ad3a62d2e007c0f0aba545d57af7dcb41b78504401bafda510d85d9a4f
- MD5 b02c623065357bddf51529cbc437a703
- SHA1 ca96bdc34d7f1938f216d51159d1a5f866bb3535
- SHA512 ceb0d16a3ae535539a1c71aefcdb2959cc066879c2d3e86b434a6a29fb00085e3712a6437d54949167cdf4ebb701d099352968bf84674911a96a332e46a671f5
- MD5 SHA1 SHA512
-
Glupteba Payload
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of NtCreateUserProcessOtherParentProcess