Extracted

• • Target

    f8f29297c7ca345746a14b3193cdb686_JaffaCakes118

  • Size

    54KB

  • MD5

    f8f29297c7ca345746a14b3193cdb686

  • SHA1

    99b1c86b5bc7fc03d329cf2937fb5fdc0ea84681

  • SHA256

    196eb4787e83a40d832faab7c55d1b7e23c7d94812f0a7e6022ebd82adf60274

  • SHA512

    c216ea6b5905bfe52d6702f5afda7beeab75de3d4013ed7642040bb50ec0e687ced1b781fd89d90f5817a2850b9f1c99f21194b2d159657bb84f97f3a19c1fe0

  • SSDEEP

    768:et5dYKV4MkWXKba15cZfTUBTWtssrEV9WAxWTgccYg6ek6nQoV1WRsKzM3v4/rI:et5dYK4PewfwZmdBINfO+VQRsKo3v

  Score

  10^/10

  metasploitbackdoordiscoverypersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Adds policy Run key to start application

    persistence

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2