General

  • Target

    f8e14313a4e9db0df7c6dce188eaa43b_JaffaCakes118

  • Size

    432KB

  • Sample

    240418-2bw9zsge62

  • MD5

    f8e14313a4e9db0df7c6dce188eaa43b

  • SHA1

    ba590ff05c3d8b2b8254bd6758ad40f4211c3236

  • SHA256

    d9d288bd9ec8e4cdb73c779526b2650f52b36f45f9532957b9133992f46ae511

  • SHA512

    6d5701db8bc76c58b04d15cf82547740b9e1bd14b6e6142e814c7b131e3d89bf57b8efbaaed206203caed94db61ae18a4ce3bf334a03b325ab33b77f4de0eae1

  • SSDEEP

    12288:cUCmZiCPT/wRU3ceWaBv1QLoSpSEyXsv:6CLYRucet+MfES

Score
10/10

Malware Config

Targets

    • Target

      f8e14313a4e9db0df7c6dce188eaa43b_JaffaCakes118

    • Size

      432KB

    • MD5

      f8e14313a4e9db0df7c6dce188eaa43b

    • SHA1

      ba590ff05c3d8b2b8254bd6758ad40f4211c3236

    • SHA256

      d9d288bd9ec8e4cdb73c779526b2650f52b36f45f9532957b9133992f46ae511

    • SHA512

      6d5701db8bc76c58b04d15cf82547740b9e1bd14b6e6142e814c7b131e3d89bf57b8efbaaed206203caed94db61ae18a4ce3bf334a03b325ab33b77f4de0eae1

    • SSDEEP

      12288:cUCmZiCPT/wRU3ceWaBv1QLoSpSEyXsv:6CLYRucet+MfES

    Score
    10/10
    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Matrix

Tasks