metasploit | 48feea2994597bfc96d31b3b738fdaa830307b7ef63eab81fcf0ebee796b152b | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09-12-2024 20:23

Sharing

Report Analysis Logs

General

Target

db6145772f41806dcab9d9f5787aa5b9_JaffaCakes118.exe
Size

229KB
MD5

db6145772f41806dcab9d9f5787aa5b9
SHA1

f4a3f3e0dd00b71630ba3059a27239f2a5e7ce74
SHA256

48feea2994597bfc96d31b3b738fdaa830307b7ef63eab81fcf0ebee796b152b
SHA512

3c92eb35648052692893004e9096c8c6329b09dbc2087744bce06bca94c5a0f82630a65c0008d8a29f4d77bace6d451ef4ebc52665b4ea140fbf2377047c4113
SSDEEP

6144:tqGdXu6wG0Nc8QsTHjwabTfCTVOdoH1WEFVx1L:llu6BHUKJOdo7

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

C:\Users\Admin\AppData\Local\Temp\db6145772f41806dcab9d9f5787aa5b9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\db6145772f41806dcab9d9f5787aa5b9_JaffaCakes118.exe"
1⤵
PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2400-1-0x0000000000400000-0x000000000043DE60-memory.dmp

Filesize
247KB

Download
memory/2400-0-0x0000000000400000-0x000000000043DE60-memory.dmp

Filesize
247KB

Download