metasploit | db78ac90884e74d3f4343469ad18567f1d834ddfbbd7b62aed1c196a66d908f7 | Triage

Submit
Reports

Overview

overview

Static

static

5

3e6e970278...18.exe

windows7-x64

5

3e6e970278...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

3e6e9702786fa7ceea55ea6fb0f491b9_JaffaCakes118
Size

130KB
Sample

241013-hrekbstgmd
MD5

3e6e9702786fa7ceea55ea6fb0f491b9
SHA1

a70817083bd419e90a4a5f34d55d48816c0878aa
SHA256

db78ac90884e74d3f4343469ad18567f1d834ddfbbd7b62aed1c196a66d908f7
SHA512

a015b9a996a5054973763b80c012698682b888aef3dddcf3214d294e65e845bddde8bbb1fdf312e46a4ab5c52c10dbf5e6266d0f2eff6d16e4139effd3922859
SSDEEP

1536:GeuTgrD7d0u9R7ui7Bm8VSFQUfsUkIJdPPf/Hb2NnjoLM+fPGALaptCenbv3Z:TJR0uD7znpUfNRTaKM+feSstCObv3Z

Score

10^/10

metasploit backdoor discovery evasion trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

3e6e9702786fa7ceea55ea6fb0f491b9_JaffaCakes118.exe

Resource

win7-20241010-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

3e6e9702786fa7ceea55ea6fb0f491b9_JaffaCakes118.exe

Resource

win10v2004-20241007-en

metasploit backdoor discovery evasion trojan upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

- Target
  
  3e6e9702786fa7ceea55ea6fb0f491b9_JaffaCakes118
- Size
  
  130KB
- MD5
  
  3e6e9702786fa7ceea55ea6fb0f491b9
- SHA1
  
  a70817083bd419e90a4a5f34d55d48816c0878aa
- SHA256
  
  db78ac90884e74d3f4343469ad18567f1d834ddfbbd7b62aed1c196a66d908f7
- SHA512
  
  a015b9a996a5054973763b80c012698682b888aef3dddcf3214d294e65e845bddde8bbb1fdf312e46a4ab5c52c10dbf5e6266d0f2eff6d16e4139effd3922859
- SSDEEP
  
  1536:GeuTgrD7d0u9R7ui7Bm8VSFQUfsUkIJdPPf/Hb2NnjoLM+fPGALaptCenbv3Z:TJR0uD7znpUfNRTaKM+feSstCObv3Z
Score

10^/10

discovery upx metasploit backdoor evasion trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

metasploitbackdoordiscoveryevasiontrojanupx

© 2018-2025

Terms | Privacy