Extracted

• • Target

    6494292827f0fccee4684eccb3fa77ad_JaffaCakes118

  • Size

    630KB

  • MD5

    6494292827f0fccee4684eccb3fa77ad

  • SHA1

    8d3add5eb37ed4a654af83cc94b981509799557a

  • SHA256

    8f7db181fa41ee4e7b72620140d177c03c807d4cc9e876b2cdcdb4157854c16f

  • SHA512

    5122ae3032cb5549295bf21e545c1267463e21b251f46d8cb731bd6228fab4b342b47b071854093676e332b7f20527aaa1ef57d6517e7fe6e43df7524bf2b25a

  • SSDEEP

    12288:AFBTF7yMqTozXeaZw+96f7z398gucKKmTLKIpiZEUO9:ArFWM/zXeWw26n3OZp9

  Score

  10^/10

  metasploitbackdoortrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2