metasploit | 16a05554db3f6f9fb46f4f3bb44d7c104ae0e664f4f829a83ca234c922a0cbce | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01/01/2025, 20:56

Sharing

Report Analysis Logs

General

Target

JaffaCakes118_609d68f9309c205f387b525e98f2a010.exe
Size

2KB
MD5

609d68f9309c205f387b525e98f2a010
SHA1

b3f13b36c88c2a4f676e47a4811f579fad7bc650
SHA256

16a05554db3f6f9fb46f4f3bb44d7c104ae0e664f4f829a83ca234c922a0cbce
SHA512

d268f50d9db15b964925fc1db8fa504e1e575205461bef6145ca62ee0fe874248528ab59acf3818424b9571bc8ebc90069ca86693758d4b8bf6d18df1c41e5af

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

3.196.132.205:12095

Signatures

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_609d68f9309c205f387b525e98f2a010.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_609d68f9309c205f387b525e98f2a010.exe"
1⤵
PID:2632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2632-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download