Extracted

• • Target

    bc4e7c633cb6bacc7e9c067fc5463d5d_JaffaCakes118

  • Size

    326KB

  • MD5

    bc4e7c633cb6bacc7e9c067fc5463d5d

  • SHA1

    09daa7dbe5f569fa031d0fab73f0dd0da6fe0ac0

  • SHA256

    e5d1a6df676d08e2b194274e556e94d830c7d337b425ac02f6ca9b2b2b7367b1

  • SHA512

    9f05a66433017710ab9c09380db4a42f55733e722f318ad4cbaa2fafe860efaf58ee69b27055326fc314c7057b6f43c302e6463be1308dfa5c603e0fb0bdb6cc

  • SSDEEP

    6144:+lXA2tZxZyPvBmz1G5KfJ8/6IaJ+qHHhYfoJCqbIRa4wkw1g5Pvir4PiwzY/KXrG:+xZUihZd+qHTZbl4w91g5niMPf4Ki

  Score

  10^/10

  metasploitbackdoordefense_evasiondiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Deletes itself

  • Indicator Removal: File Deletion

    Adversaries may delete files left behind by the actions of their intrusion activity.

    defense_evasion

  • Drops file in System32 directory

  behavioral1behavioral2