General
-
Target
Injection.vmp.exe
-
Size
24.3MB
-
Sample
240505-jat45aec59
-
MD5
030665b9bc6bb9368bcdc111893e6679
-
SHA1
c6d2e1958a46e85b5d64f335f0fe6c44456f91f4
-
SHA256
ac74dffe88b16fde19b002cfd864c9b77a19569277f1fa55dd2c98377eb70185
-
SHA512
1aa94cc19771c2f4c3936c9321807534f2c514e86dca28b58e581ecbe597ac6322807d7af7d20ce5cce2c86b69b73093573a865984f1c4e28ff9fbe6176af925
-
SSDEEP
393216:olwXPD3qYcjEyJpfuL4TVQ5akN1exrumG4pw5qBPlLmNO31TrLbhZc:+K2X20eakN5mfSkpmNO9nbhZc
Static task
static1
Behavioral task
behavioral1
Sample
Injection.vmp.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
metasploit
metasploit_stager
172.31.199.95:4444
Targets
-
-
Target
Injection.vmp.exe
-
Size
24.3MB
-
MD5
030665b9bc6bb9368bcdc111893e6679
-
SHA1
c6d2e1958a46e85b5d64f335f0fe6c44456f91f4
-
SHA256
ac74dffe88b16fde19b002cfd864c9b77a19569277f1fa55dd2c98377eb70185
-
SHA512
1aa94cc19771c2f4c3936c9321807534f2c514e86dca28b58e581ecbe597ac6322807d7af7d20ce5cce2c86b69b73093573a865984f1c4e28ff9fbe6176af925
-
SSDEEP
393216:olwXPD3qYcjEyJpfuL4TVQ5akN1exrumG4pw5qBPlLmNO31TrLbhZc:+K2X20eakN5mfSkpmNO9nbhZc
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-