Extracted

Extracted

• • Target

    f600dea87bf0709ebf4162b94bed35dd_JaffaCakes118

  • Size

    123KB

  • MD5

    f600dea87bf0709ebf4162b94bed35dd

  • SHA1

    dcc05693aec3bb6b257be2422072e4149af75e24

  • SHA256

    590d78ff7ab35052737adf5f94819b31cd4ef9af89112ece5e59b76d99292e14

  • SHA512

    dc5f1c57ee495e05c3bee2b66eecb465ccefc454f089ffe8505af1a13df6a3a727fbc68a33b2068b8a08bf0d41bd9512857425b1ed32a738b175437a6a4b7383

  • SSDEEP

    3072:9b9Sb1K9HK4CTbdcsvFWj+eDafue7o0qQk0BVkY3Poutu:95SbwRK4CTbd9W7Dan7o0TBVkEPoS

  Score

  10^/10

  metasploitbackdoordiscoverypersistencetrojanupx

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Adds Run key to start application

    persistence

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2