Extracted

• • Target

    d0ceaeadda5dc680e3b5c59257167828_JaffaCakes118

  • Size

    208KB

  • MD5

    d0ceaeadda5dc680e3b5c59257167828

  • SHA1

    f8c4150b627c5736fed6ae13616dedd9def05e79

  • SHA256

    5d9a141fb5d5330fdf2ed1dd2a5172cd7e706c670694a6616aca4effb48384f5

  • SHA512

    82139173db4433f707f00cbbc7d86707d6d737a9151ca86f316e836ddb53d9df350542f18fcaf9d25e5f163f39abf34ffd8daefc37c489c1b36330cf487e0cc2

  • SSDEEP

    3072:Bf8wNOO5/bHoUYmxF44UkbZEvoAVlUy0dE+pviXz61O1vJp3A8eXD/riSAV7LlN:Bn5dn4rkWg/iXz6w1zeX/nA

  Score

  10^/10

  metasploitbackdoordiscoveryevasiontrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Modifies firewall policy service

    evasion

  • Windows security bypass

    evasiontrojan

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Drops file in System32 directory

  behavioral1behavioral2