Extracted

• • Target

    ec092f333ce6f60e9f483bd15c4b41f2_JaffaCakes118

  • Size

    50KB

  • MD5

    ec092f333ce6f60e9f483bd15c4b41f2

  • SHA1

    1c485514d05986a1fbe7f5dd75201dc676f101a5

  • SHA256

    d18dc89eee1957ffacbc85e3436e52c474f79000ab21ccb58ace50f383fddbdd

  • SHA512

    ac93be78937aa8bf561a87e1befd0503e540ddadd50e67a848e600ef35a7b13c09d80c91cb0f18a2d4842f949a151cba25a55976007dd1d96a9da248a253f6f3

  • SSDEEP

    1536:DQnSuPXKKhksv0n/9W1RirH2K9Lqrbs8V2G67hR+22SLQmphSNSvgb1lm9iFFDZx:DQnSuPXlhksv0/9W1grH2K9GNQG67hY/

  Score

  10^/10

  metasploitbackdoordiscoverypersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Adds policy Run key to start application

    persistence

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2