General
-
Target
57ebc1be9d52a18a03f1341fe998afa8c54facc3d96c0bf80a201a80741d948a
-
Size
5KB
-
Sample
220724-vykfdacefq
-
MD5
f768a1ec913aea0915bcc20c17896be3
-
SHA1
a362956664379ff9860a3c56fb1daf6e000220c4
-
SHA256
57ebc1be9d52a18a03f1341fe998afa8c54facc3d96c0bf80a201a80741d948a
-
SHA512
9fa8de6d9c4736dd0300e334137d3e60e42860f7b70dd452b35d515b3d7ebca0ef942d3bc65613d6be8e91a4f93c4c58b4e81d99649a9941cfafb46185f6dc9d
Behavioral task
behavioral1
Sample
57ebc1be9d52a18a03f1341fe998afa8c54facc3d96c0bf80a201a80741d948a.dll
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
57ebc1be9d52a18a03f1341fe998afa8c54facc3d96c0bf80a201a80741d948a.dll
Resource
win10v2004-20220721-en
Malware Config
Extracted
metasploit
windows/single_exec
Targets
-
-
Target
57ebc1be9d52a18a03f1341fe998afa8c54facc3d96c0bf80a201a80741d948a
-
Size
5KB
-
MD5
f768a1ec913aea0915bcc20c17896be3
-
SHA1
a362956664379ff9860a3c56fb1daf6e000220c4
-
SHA256
57ebc1be9d52a18a03f1341fe998afa8c54facc3d96c0bf80a201a80741d948a
-
SHA512
9fa8de6d9c4736dd0300e334137d3e60e42860f7b70dd452b35d515b3d7ebca0ef942d3bc65613d6be8e91a4f93c4c58b4e81d99649a9941cfafb46185f6dc9d
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Use of msiexec (install) with remote resource
-
Suspicious use of SetThreadContext
-