Extracted

• • Target

    a74a1519011d08c8a3524144765e3fe0_JaffaCakes118

  • Size

    323KB

  • MD5

    a74a1519011d08c8a3524144765e3fe0

  • SHA1

    30354936612ed44c6e8e1b08eea8e225cab06616

  • SHA256

    ac357c437fb811fd26c500fd7b22629ab089c45e130b2870195cfa633de1d167

  • SHA512

    4eba836c1b9803ceea4d01c09cd057f58c3b9b368187c4a2f7f278bd6bebc5d13bc7d8ffd9c0b7a12ea56f5a4021a3f2962cd6f1ebd7fd0b729f18c1763d9694

  • SSDEEP

    1536:7idi4xZsarhAGo7+7T/ziPxjoBXDK+HHnnq:m8OCU6FoBXdHnnq

  Score

  10^/10

  metasploitbackdoordiscoverypersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Adds policy Run key to start application

    persistence

  • Drops file in Drivers directory

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2