General

  • Target

    f70877206b76b252a58729c9ddad5afa_JaffaCakes118

  • Size

    815KB

  • Sample

    240418-cae7msfh75

  • MD5

    f70877206b76b252a58729c9ddad5afa

  • SHA1

    b103917a668618cdf0654678b14ae619749f4949

  • SHA256

    7d779dc335ff69aad2d7b74cc4ace4b83968e106cf138f6ef5d09f4068b1f466

  • SHA512

    3c00d272fb2e7dd2d77e426cdc53a20a8e6974137bbf1549555059b3d85c10ebd4c5853f45583922994697671d7d9e5222bb3c0b4fd28bc0a223aef401a40a38

  • SSDEEP

    24576:JiAxUKrH/pGOegRMteInlobgJMOkv/HIZLw9:TxUKgvg+teua6MPv/HIZLw

Score
10/10

Malware Config

Targets

    • Target

      f70877206b76b252a58729c9ddad5afa_JaffaCakes118

    • Size

      815KB

    • MD5

      f70877206b76b252a58729c9ddad5afa

    • SHA1

      b103917a668618cdf0654678b14ae619749f4949

    • SHA256

      7d779dc335ff69aad2d7b74cc4ace4b83968e106cf138f6ef5d09f4068b1f466

    • SHA512

      3c00d272fb2e7dd2d77e426cdc53a20a8e6974137bbf1549555059b3d85c10ebd4c5853f45583922994697671d7d9e5222bb3c0b4fd28bc0a223aef401a40a38

    • SSDEEP

      24576:JiAxUKrH/pGOegRMteInlobgJMOkv/HIZLw9:TxUKgvg+teua6MPv/HIZLw

    Score
    10/10
    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Matrix

Tasks