Extracted

• • Target

    ee49d6f49490ad98a6eda7ca6a93e9c3_JaffaCakes118

  • Size

    152KB

  • MD5

    ee49d6f49490ad98a6eda7ca6a93e9c3

  • SHA1

    693d7773436fbc79c404721a3228036fdd862c30

  • SHA256

    eebde709fb575f25dc0440d7b493d94db7312f77689c2872a1a86c24c55a35ef

  • SHA512

    b6069cffe146870ce750b965d411c7e58a3d7bd6eafd93f700a308e0dc06a4d9081f81e21d44b771f9d895331b7fd25f5e6b56ad6e02fb8892404f000e1c457a

  • SSDEEP

    3072:fi6XBulAuDQaj0et2Q5BvcGDKKo3n114RHGE3gVLKLVX:f3xulTEGt2Qfvc1114RHGVVYd

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2