Extracted

• • Target

    a6c084313af9004bd93f950d402325f1_JaffaCakes118

  • Size

    147KB

  • MD5

    a6c084313af9004bd93f950d402325f1

  • SHA1

    700aad3dd08576087be3a670fc9934ad69c4619e

  • SHA256

    f4fb97402cc99bd0a29647458d556b3eec9cc5765e552dab9b459b222107e2ec

  • SHA512

    495078dadc3861cc7c910548bf98d011ca58a7a5aa8d34eeda32dc9e9770a7b88bfd920300957ed7979f0f03018ee6013b15c9443ef03e45896cb08d7bbbbf00

  • SSDEEP

    3072:HrwKSBk6KYLYkl8V127uRIdyl9Tm5lLgCUgHxryoJHE:HrwKMk6jY1V8uiQ7EJUmwoO

  Score

  10^/10

  metasploitaspackv2backdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2