General
-
Target
20b3f9f50049e2025cab5a3d230bcb9e72498c02ec3c8d4160092b1c8f308356.msi
-
Size
156KB
-
Sample
240531-bf62waac29
-
MD5
0372fb862dc13979b09b5505ca32e6e3
-
SHA1
25cfbfefb6d8dfaf42870bc970ae2c834da44a8c
-
SHA256
20b3f9f50049e2025cab5a3d230bcb9e72498c02ec3c8d4160092b1c8f308356
-
SHA512
8eecd57b5df14c261ca7f38c7428f03ade00e427274bce1c76c8eed255364a0310aae86cf978a3a2871deb76445b3eb02e45ae8bee461eb20eb9470b0c1003e9
-
SSDEEP
384:iHpe4ZvJXK7gzFM7Wu8wxukoXgZs+5BCq26yy3M5BCqPN:Zmxa7gBMyuZDCUyWMDC
Behavioral task
behavioral1
Sample
20b3f9f50049e2025cab5a3d230bcb9e72498c02ec3c8d4160092b1c8f308356.msi
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20b3f9f50049e2025cab5a3d230bcb9e72498c02ec3c8d4160092b1c8f308356.msi
Resource
win10v2004-20240508-en
Malware Config
Extracted
metasploit
metasploit_stager
1.14.247.162:40001
Targets
-
-
Target
20b3f9f50049e2025cab5a3d230bcb9e72498c02ec3c8d4160092b1c8f308356.msi
-
Size
156KB
-
MD5
0372fb862dc13979b09b5505ca32e6e3
-
SHA1
25cfbfefb6d8dfaf42870bc970ae2c834da44a8c
-
SHA256
20b3f9f50049e2025cab5a3d230bcb9e72498c02ec3c8d4160092b1c8f308356
-
SHA512
8eecd57b5df14c261ca7f38c7428f03ade00e427274bce1c76c8eed255364a0310aae86cf978a3a2871deb76445b3eb02e45ae8bee461eb20eb9470b0c1003e9
-
SSDEEP
384:iHpe4ZvJXK7gzFM7Wu8wxukoXgZs+5BCq26yy3M5BCqPN:Zmxa7gBMyuZDCUyWMDC
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-