General

  • Target

    c56fd92203aceaafe98069150c429c00_JaffaCakes118

  • Size

    432KB

  • Sample

    240827-wgxj2stakc

  • MD5

    c56fd92203aceaafe98069150c429c00

  • SHA1

    721e373cd5623e78d7e01e63d913541b916641d9

  • SHA256

    803f4672a378c3f81bf28fa0be7e7228962d5f8af1c2ee80db0a25ded4b12231

  • SHA512

    fe5d0c7b74e5415e07f8678ac816749e1a07e52f147cf3d6820b91c04a1cae1f110a59364a61535038b8477b09e088a3af4e36f402d0f73e9293c253a20154af

  • SSDEEP

    12288:JUCmZiC9/B5UldxBzyduElwJLsgorvbZ+C/q4NoNMy8IcZP+MEgOW:zC95q4jgIn/q4NrIcI6

Score
10/10

Malware Config

Targets

    • Target

      c56fd92203aceaafe98069150c429c00_JaffaCakes118

    • Size

      432KB

    • MD5

      c56fd92203aceaafe98069150c429c00

    • SHA1

      721e373cd5623e78d7e01e63d913541b916641d9

    • SHA256

      803f4672a378c3f81bf28fa0be7e7228962d5f8af1c2ee80db0a25ded4b12231

    • SHA512

      fe5d0c7b74e5415e07f8678ac816749e1a07e52f147cf3d6820b91c04a1cae1f110a59364a61535038b8477b09e088a3af4e36f402d0f73e9293c253a20154af

    • SSDEEP

      12288:JUCmZiC9/B5UldxBzyduElwJLsgorvbZ+C/q4NoNMy8IcZP+MEgOW:zC95q4jgIn/q4NrIcI6

    Score
    10/10
    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Matrix

Tasks