General

  • Target

    93f1844f0f1df0cb8813ce130b8898da_JaffaCakes118

  • Size

    417KB

  • Sample

    240813-vfcykszepk

  • MD5

    93f1844f0f1df0cb8813ce130b8898da

  • SHA1

    d31074d920714113b3fb96b42d9e20aa4fd362a7

  • SHA256

    2e87027d70f21c674790a5acb19748acfec3d95a2fc660599230829a09a8c8e4

  • SHA512

    f2e56963bcfc43d8acba5bee96659b7eaff8524276c1c5304d4b306818251a0a366d30bdb5471cf2334d1ba7c5f7840408c10947246efe77462784cd42adcc05

  • SSDEEP

    6144:ZSpwTxz8fEYga22UHHXyDArvBIM6zOI3ONgEox946lzmEZYS5+oj9COdbeOut8MQ:w+lAfEYAtHCDArvxeO/jo46hjYJQ0mN

Malware Config

Targets

    • Target

      93f1844f0f1df0cb8813ce130b8898da_JaffaCakes118

    • Size

      417KB

    • MD5

      93f1844f0f1df0cb8813ce130b8898da

    • SHA1

      d31074d920714113b3fb96b42d9e20aa4fd362a7

    • SHA256

      2e87027d70f21c674790a5acb19748acfec3d95a2fc660599230829a09a8c8e4

    • SHA512

      f2e56963bcfc43d8acba5bee96659b7eaff8524276c1c5304d4b306818251a0a366d30bdb5471cf2334d1ba7c5f7840408c10947246efe77462784cd42adcc05

    • SSDEEP

      6144:ZSpwTxz8fEYga22UHHXyDArvBIM6zOI3ONgEox946lzmEZYS5+oj9COdbeOut8MQ:w+lAfEYAtHCDArvxeO/jo46hjYJQ0mN

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Enterprise v15

Tasks