metasploit | 943ec7f4cd8f44c169609c6e4319941dc1b6688e0d635802337e2d8de0202b7e | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29-12-2024 07:44

Sharing

Report Analysis Logs

General

Target

JaffaCakes118_943ec7f4cd8f44c169609c6e4319941dc1b6688e0d635802337e2d8de0202b7e.exe
Size

72KB
MD5

d2953c9af36d54e46a66eddf82a79b7d
SHA1

460664b337eab37916e30e87605945f5ec554a9e
SHA256

943ec7f4cd8f44c169609c6e4319941dc1b6688e0d635802337e2d8de0202b7e
SHA512

4d9ebe463d15f49abd8c356a984f26fc033f68d13ab4f866265a3650d9f432d30359ee869a02c6b3411df31a54bb722bbdb4af7acf8247c93678111fdb1a0590
SSDEEP

1536:I7HHyvsr2swCuom4h9FdGdNm0gWGR4Zdi9c2PMb+KR0Nc8QsJq39:uyv0IyKxnGki+se0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_943ec7f4cd8f44c169609c6e4319941dc1b6688e0d635802337e2d8de0202b7e.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_943ec7f4cd8f44c169609c6e4319941dc1b6688e0d635802337e2d8de0202b7e.exe"
1⤵
PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1984-0-0x0000000000030000-0x0000000000034000-memory.dmp

Filesize
16KB

Download
memory/1984-1-0x0000000000030000-0x0000000000034000-memory.dmp

Filesize
16KB

Download