MetaSploit

Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

Modifies WinLogon for persistence

Modifies firewall policy service

Modifies security service

Windows security bypass

suricata: ET MALWARE IRC Nick change on non-standard port

suricata: ET MALWARE IRC Nick change on non-standard port

Executes dropped EXE

Looks for VMWare Tools registry key

Modifies Installed Components in the registry

Modifies Windows Firewall