General

  • Target

    c0a10fec97b5da4dff85490ba76dd932_JaffaCakes118

  • Size

    416KB

  • Sample

    240825-nfenvatcjr

  • MD5

    c0a10fec97b5da4dff85490ba76dd932

  • SHA1

    9cabcbbbca17cdd24808d2496a423aa35e5eb46c

  • SHA256

    76c814dac7c821f6288a9616bdfdc369e21689d5e821d732d6153ec2e2a61fec

  • SHA512

    769d528fcf2fa80fa4d04668e1726469ba68188aee9d4c0a03f22a90e9ac40dea08e50ad010640c1345c69a620502247a51e89dfed24bc7b9bc6cc3f6b085e11

  • SSDEEP

    12288:qewj0YCeEB4sNVOt2bL4DqGBXqJ44zGM1FUvqKiEPXa:qjoYC5p42cG44zGQzKhXa

Score
10/10

Malware Config

Targets

    • Target

      c0a10fec97b5da4dff85490ba76dd932_JaffaCakes118

    • Size

      416KB

    • MD5

      c0a10fec97b5da4dff85490ba76dd932

    • SHA1

      9cabcbbbca17cdd24808d2496a423aa35e5eb46c

    • SHA256

      76c814dac7c821f6288a9616bdfdc369e21689d5e821d732d6153ec2e2a61fec

    • SHA512

      769d528fcf2fa80fa4d04668e1726469ba68188aee9d4c0a03f22a90e9ac40dea08e50ad010640c1345c69a620502247a51e89dfed24bc7b9bc6cc3f6b085e11

    • SSDEEP

      12288:qewj0YCeEB4sNVOt2bL4DqGBXqJ44zGM1FUvqKiEPXa:qjoYC5p42cG44zGQzKhXa

    Score
    10/10
    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Matrix

Tasks