Extracted

• • Target

    cf572dbcf7b110c0093d809fc98a0f64_JaffaCakes118

  • Size

    63KB

  • MD5

    cf572dbcf7b110c0093d809fc98a0f64

  • SHA1

    d2ea75058e7812f71832dc5b1717faccd60ed066

  • SHA256

    c5d29146719da32748517ebe83dbf5408d3c6334ee9850f7c37aede7c49956bb

  • SHA512

    591174f33fc56452cea4d330f202e90e8c5f7a829e4a9ffd0dd1e3a9706c3b4a1c3da07310917f25d6d5b426aa14707491d6c464e7a68d18387f3d33fc94a873

  • SSDEEP

    384:IBzhu1KO2jIf7kqbXdC3mD5z4onsND5DXP0M2vYCAGykBRSG/u/Ub8S6rDqnv47Y:suCkdC2D5z4oWV0OCAB4Rld8Inv47

  Score

  10^/10

  metasploitbackdoordiscoverytrojanupx

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2