Analysis
- max time kernel
132s - max time network
101s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
- submitted
21/05/2024, 04:27
General
- Target 620678e996d9bf5bdd6d934e51102b0f_JaffaCakes118.exe
- Size 1.2MB
- Sample240521-e3jrmshf31
- SHA256 a0a24d557fe8ebd742c71a8c90f081d7e5d26397b9cd4e38190cbcade0907a52
Score
10/10
Malware Config
Signatures
- Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
- Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\620678e996d9bf5bdd6d934e51102b0f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\620678e996d9bf5bdd6d934e51102b0f_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2988-0-0x0000000000523000-0x0000000000586000-memory.dmp
memory/2988-1-0x00000000003E0000-0x0000000000586000-memory.dmp
memory/2988-2-0x0000000000523000-0x0000000000586000-memory.dmp
memory/2988-3-0x00000000003E0000-0x0000000000586000-memory.dmp