Extracted

• • Target

    e212c2808853acf1583ddbe702b9d568_JaffaCakes118

  • Size

    1.3MB

  • MD5

    e212c2808853acf1583ddbe702b9d568

  • SHA1

    5b527455ed87cae7f5cd0829efd6033970bf960b

  • SHA256

    ed3cf60c3386be62fca0bbda630d283ea4188616872204c208ec81091ee134cf

  • SHA512

    7217f258e585c0e7447b5bcc4ca584084c97b734bc2509f87fae9d611198205b7969c71a4c18597c3833652667c6d809789b9599c36803cdc3c126f1a0a59a8c

  • SSDEEP

    24576:RGcgOHTzNxOcBOk2AHiZuNhoQshIbVOLnQ19vkudmKfLFRfzay2BEwoeXYRl:RngO/DOgOYWurooVYuFdm8ZRfkE4Yr

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2