General

  • Target

    f59c7f968b7af0b65e3944acf921106f_JaffaCakes118

  • Size

    734KB

  • Sample

    240417-m1t4laec3z

  • MD5

    f59c7f968b7af0b65e3944acf921106f

  • SHA1

    15d0c863215c8d9d07b5514a35fc72cc4495865b

  • SHA256

    742c592f403e6ca27a661bce036058d6f2d1505ccf8f470f2c81c82e1ab675d6

  • SHA512

    99d1ebc560e6ec9faaf17b949babf7e8a792e60bd0652a31ff2b3fc881cf69853dd4e3b0366fc8761e0b9116b319b9472163476993a0fe8230cfe638d6c97269

  • SSDEEP

    12288:JAwSfxL/2Dc3oDLLmt0LDQewsHjGwdoc4Zlp0pGq+vMZziV17kRiap:6ZewsHjOZlp0pGq/ziD8

Score
10/10

Malware Config

Targets

    • Target

      f59c7f968b7af0b65e3944acf921106f_JaffaCakes118

    • Size

      734KB

    • MD5

      f59c7f968b7af0b65e3944acf921106f

    • SHA1

      15d0c863215c8d9d07b5514a35fc72cc4495865b

    • SHA256

      742c592f403e6ca27a661bce036058d6f2d1505ccf8f470f2c81c82e1ab675d6

    • SHA512

      99d1ebc560e6ec9faaf17b949babf7e8a792e60bd0652a31ff2b3fc881cf69853dd4e3b0366fc8761e0b9116b319b9472163476993a0fe8230cfe638d6c97269

    • SSDEEP

      12288:JAwSfxL/2Dc3oDLLmt0LDQewsHjGwdoc4Zlp0pGq+vMZziV17kRiap:6ZewsHjOZlp0pGq/ziD8

    Score
    10/10
    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Matrix

Tasks