Extracted

• • Target

    c510799442bd72fa1991b0b39ea36eee_JaffaCakes118

  • Size

    88KB

  • MD5

    c510799442bd72fa1991b0b39ea36eee

  • SHA1

    512f8d8c26ed25fff781a525d552eca160e7d3d8

  • SHA256

    cbeda8eb30621962ca26bbd4771c05a028d8fff96d031503b9a1e396af02814a

  • SHA512

    47e29ff60e4c6f772a582c579d33be253c62720863fff617077c9579171fc9ad52ab861812187040518d9d350475af1fbb2d7f0f1ccfd6167b756ed6bf6fc014

  • SSDEEP

    1536:5+iFaEtB4Y//aXoo7YMMHY638X7QTW3j/VFVi/MV2CJMfdT:5+iFaEtiY/iXooMMMh387CW3j/j4SAT

  Score

  10^/10

  metasploitbackdoordiscoverypersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Adds policy Run key to start application

    persistence

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2