Extracted

• • Target

    JaffaCakes118_0036957131d6c661b38c6ee1f4bfdb9b

  • Size

    47KB

  • MD5

    0036957131d6c661b38c6ee1f4bfdb9b

  • SHA1

    7e50961616bb92e3719b0cf207f43c8cac7c93b8

  • SHA256

    364423dc6ab0cdcf70e372e2fbf4beb1537733326b554103f692f89454ed7fff

  • SHA512

    3f25f071b6a1e0097e190119f98fe1c0dfa1e65c2e2d3e80f9247a879c0d92d6c12f23a41f9d01c087c0eff19c393cd69bca980706675f52afc5ae38f614d20d

  • SSDEEP

    768:ZyxP9bNHJ3PlDlgAodJSqFVbXDspfYRJNQh6c4ftN1ZvP75+27h37JS1Q5GuH4N8:ZyjbT3PUXdJSqLDafSNQrQZ3gG37A654

  Score

  10^/10

  metasploitbackdoordiscoverypersistencetrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Adds policy Run key to start application

    persistence

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2