Extracted

Extracted

• • Target

    2acdbd2d660d948e6bd07a7e83e12ebd_JaffaCakes118

  • Size

    132KB

  • MD5

    2acdbd2d660d948e6bd07a7e83e12ebd

  • SHA1

    013534a38e260c57d94d76542654e1aa6ffb8b1a

  • SHA256

    408e5dc79d1093cd03d4402d09ef9a0ae79699c84a952487eecca8700f6cce8d

  • SHA512

    279e6e2274de67838b3e44eb9fcc9acd43cd54a2601b9474bd3fd47f8bed5648810ea2ecb241cd23b90838a5f4dc4f2078b73a0baaffcaf4ccb1bc80e0ffff4e

  • SSDEEP

    3072:kGu9BlfzWIbXWm+w0J75i32eRCXzNWnvPyUDT5pLwHEx:k/0uozfqvK8T/w6

  Score

  10^/10

  metasploitbackdoorpersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2