Overview

overview

10

Static

static

10

eb84da6a38...18.exe

windows7-x64

10

eb84da6a38...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-09-2024 14:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eb84da6a38627be62a5b07055ee6a052_JaffaCakes118.exe

  • Size

    72KB

  • MD5

    eb84da6a38627be62a5b07055ee6a052

  • SHA1

    f96af1e80857109aca116b14a19913ffd6d396b5

  • SHA256

    ca51a4a61a408a141c306b7896112701c5b0bd4eb927ae4e37e39f410f8611cb

  • SHA512

    3406623caeafda303844c732e14af6b44de72b399ffc8d7aecb721ccd863a149dc1cafda0158583aac6d31bd3616e0c2ef0bb5a4ca065172fb3985c746781251

  • SSDEEP

    1536:IbfUQ05HowXRvmLZPD4ebRCGl0J/Mb+KR0Nc8QsJq39:ifUtHowhv2hD4RRJ/e0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

Processes

  • C:\Users\Admin\AppData\Local\Temp\eb84da6a38627be62a5b07055ee6a052_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\eb84da6a38627be62a5b07055ee6a052_JaffaCakes118.exe"
    1⤵
      PID:1560

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1560-0-0x0000000000020000-0x0000000000023000-memory.dmp

      Filesize

      12KB

      Download