metasploit | jaffacakes118_da759e4b29353703f8bb131d69c24b7186e3f4c3bc04852dc200fb57e524f206[.]bin

General

Target
jaffacakes118_da759e4b29353703f8bb131d69c24b7186e3f4c3bc04852dc200fb57e524f206.bin
Size 72KB
Sample260924-dvnvysch48
SHA256 da759e4b29353703f8bb131d69c24b7186e3f4c3bc04852dc200fb57e524f206
MD5 b854564a22d9c77e591d686d2292f72b
SHA1 4576b83848a575012e2678f646e36dbb622d5cbd
SHA512 60abeace28012fc83fceabe9bba6e238bac38e3412963a00ce25ab4331d865c14ced522fa1dc2fb48f0cc06bac04f19c8feae5cc1f536e5c5766227f23b80094
SSDEEP 1536:IGN4areN/f4+qGv1/XkxJfwGIdXRm4Z1YjlKCPZMb+KR0Nc8Qsc:DrC/g+qsNKBIVRujlnBe0Nc8Qsc
TLSH
T1FD73AF43D5845435C29112BE67B93AB59D74E2BA3342D5CF3A8CCDE4DBC1CB0A229786
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Version

C2

Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_da759e4b29353703f8bb131d69c24b7186e3f4c3bc04852dc200fb57e524f206.bin

jaffacakes118_da759e4b29353703f8bb131d69c24b7186e3f4c3bc04852dc200fb57e524f206.bin

.exe 72KB

SHA256 da759e4b29353703f8bb131d69c24b7186e3f4c3bc04852dc200fb57e524f206
MD5 b854564a22d9c77e591d686d2292f72b
SHA1 4576b83848a575012e2678f646e36dbb622d5cbd
SHA512 60abeace28012fc83fceabe9bba6e238bac38e3412963a00ce25ab4331d865c14ced522fa1dc2fb48f0cc06bac04f19c8feae5cc1f536e5c5766227f23b80094
SSDEEP 1536:IGN4areN/f4+qGv1/XkxJfwGIdXRm4Z1YjlKCPZMb+KR0Nc8Qsc:DrC/g+qsNKBIVRujlnBe0Nc8Qsc
TLSH
T1FD73AF43D5845435C29112BE67B93AB59D74E2BA3342D5CF3A8CCDE4DBC1CB0A229786
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

48313

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths