Extracted

• • Target

    JaffaCakes118_6ac39664c8bfcee4ae79623a1552a60f

  • Size

    52KB

  • MD5

    6ac39664c8bfcee4ae79623a1552a60f

  • SHA1

    b476ee828884ba6ba4a76d12f4ffd4e0aa700127

  • SHA256

    7b3786b39af1b4d69c3ada0f2014e5aade19286b004366e10a49a7f50cdb8153

  • SHA512

    7689614952ac341a98c7f71b5f4c204d43d8bf60302e21dd8aba5bf82c0e40e71a32e01549b5e874c292c41e8c8901fda80c20aef1d101ce3e89049dbe855ca2

  • SSDEEP

    1536:nVd4nXigUiL5o+retkrZ9nL4uuPmdrgIfwY:nVdqUiLNaSnkuumdpl

  Score

  10^/10

  metasploitbackdoordiscoverypersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Adds policy Run key to start application

    persistence

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2