Extracted

• • Target

    d139bff76ab6e803f5555a6a634c926c_JaffaCakes118

  • Size

    62KB

  • MD5

    d139bff76ab6e803f5555a6a634c926c

  • SHA1

    388bbf3a13f23cb06633a328f8d222aa2c5e4406

  • SHA256

    4252a6679aba7d4d21cfd61937b845c31e84ed2fbfa7c9318db2d4c59c3d2af4

  • SHA512

    69077dbdf850e220017a029db006860b21972fcca102ec15345757a8d095b3561902b1028c8dea462a8625bdde728cb56c718815914974b5132e2b82b5e0fd33

  • SSDEEP

    1536:y+zwbiCLl6mjnsoG9oUmG6zawS/o038hgG:yHiGleoGYzPSD8h

  Score

  10^/10

  metasploitbackdoordiscoverypersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Adds policy Run key to start application

    persistence

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2