General

  • Target

    c472ee4d2d1191bd136aae1d98bb04ac_JaffaCakes118

  • Size

    416KB

  • Sample

    240827-gq7ztawcpe

  • MD5

    c472ee4d2d1191bd136aae1d98bb04ac

  • SHA1

    84baf756e580e820d07e1bd47ec0760f5169843e

  • SHA256

    bdb4923472157091ac1773d24d29ed582ce4731b8d3166c279dc19a8d1d0374f

  • SHA512

    acb84a63a7eab291c2aad5e12593a9569181dc1ec6ac13a4d0156e41f0bd6f736673bd7cc7c4397718c81cdf3f132aba141aa3e1a743114770b801a2b514cfad

  • SSDEEP

    12288:jyoMcds7PYwQXhJ0IppHhCaiUNDNGPE5w9gk:jhp+kwQXwo3ixPE5cgk

Score
10/10

Malware Config

Targets

    • Target

      c472ee4d2d1191bd136aae1d98bb04ac_JaffaCakes118

    • Size

      416KB

    • MD5

      c472ee4d2d1191bd136aae1d98bb04ac

    • SHA1

      84baf756e580e820d07e1bd47ec0760f5169843e

    • SHA256

      bdb4923472157091ac1773d24d29ed582ce4731b8d3166c279dc19a8d1d0374f

    • SHA512

      acb84a63a7eab291c2aad5e12593a9569181dc1ec6ac13a4d0156e41f0bd6f736673bd7cc7c4397718c81cdf3f132aba141aa3e1a743114770b801a2b514cfad

    • SSDEEP

      12288:jyoMcds7PYwQXhJ0IppHhCaiUNDNGPE5w9gk:jhp+kwQXwo3ixPE5cgk

    Score
    10/10
    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Matrix

Tasks