Extracted

• • Target

    f4791bec9bacae9b6f4b43291cc09096_JaffaCakes118

  • Size

    16KB

  • MD5

    f4791bec9bacae9b6f4b43291cc09096

  • SHA1

    91d47447ec9280107edc4599873627097c9dbe7b

  • SHA256

    d846aa74b9900a44a1031bf3e10a3add8980a25152677d459bfb991aa4ce53d0

  • SHA512

    b362d4f2409cf204fcc0077f2b61fe55242d23441d408b6e1fd727ca7876acc24346a18c1b798da29ba2f594ccd1056168cbeddf2d266594a52707c92efe7182

  • SSDEEP

    384:npbzUH70+gvywO1F1lVekyLyNvIWMorbWoiGmL0B2EVlKjpY:pv470+gvywO1FdyLqIWMonWds2elK1Y

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Drops file in Drivers directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2