Extracted

• • Target

    2fecd87948f115c4aad324f544e24d97_JaffaCakes118

  • Size

    144KB

  • MD5

    2fecd87948f115c4aad324f544e24d97

  • SHA1

    f5858976c2bb50dafdd305750dcd8b26785abdb5

  • SHA256

    6908443c51099ce928f43971c833de4066a8a4b302ea2af92f690eb68cd6e025

  • SHA512

    e81ab2916ff72b7726ba5c5bd97995c10e31f6552430671079a3c990adbec40e9e743547476ddea0ad3280db92c8d5f6af0c22da89fe8577b0473e8df6964362

  • SSDEEP

    3072:TjcrKunQngXHNz1i2XlCmYBsqy0f7VMzRmle4YPvjil47tJYY34U:Tjdu4eHL91CmYWqrxMglaWl4Z

  Score

  10^/10

  metasploitbackdoorevasionpersistenceprivilege_escalationtrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Modifies firewall policy service

    evasion

  • Windows security bypass

    evasiontrojan

  • Modifies Windows Firewall

    evasion

  • Deletes itself

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Drops file in System32 directory

  behavioral1behavioral2