Extracted

• • Target

    9629fc742fc460b730eca4b26603970f_JaffaCakes118

  • Size

    246KB

  • MD5

    9629fc742fc460b730eca4b26603970f

  • SHA1

    b0ecfb60ff6c0f14faa88c4e7908e455a9c5e8c5

  • SHA256

    a4f0fd25463e6899145939949e29f73fd8bc914a69304c3e032bbb15df895a49

  • SHA512

    550bbba94b0d4ee9250b8aaba0d48e35c2aa946a6eaaba25569babce8370e39760fe4b93d8180eec835c3690be7c8a31e7bd6b21da5478b707c4d6b4f1630349

  • SSDEEP

    6144:d/H+8pmvtzHm48oilMAOSf0XFdkzR9CnPYltB:dv+Ym1Y0AOSfaeR0nwfB

  Score

  10^/10

  metasploitbackdoordiscoverytrojanpersistenceprivilege_escalation

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2