General

  • Target

    cf07c60a495ec86c23426a7f5329f6de_JaffaCakes118

  • Size

    416KB

  • Sample

    240906-jkyv3avdjb

  • MD5

    cf07c60a495ec86c23426a7f5329f6de

  • SHA1

    70a924091ace3b6fdad8d10b1522872e6d9a4f7e

  • SHA256

    8285128e830652472b1bb859e8a49242d4ee9f03de739d2b4185c7a4ef949a3b

  • SHA512

    b31da22b3981ff6452012e4e894c5b71e5dede62c37fd4e05eac95a786865c8c8d077f0dba621b5df22a58a61aa3dbbe8fb3755b4a0280b7aa08231349d13c28

  • SSDEEP

    6144:KvXjjhIUHT14NhXGN/+H9EDFB2MzsSp+EDFAI6gCWNge4c9SZa:KvXjjhIWTyW5+dEp2ZEDX6gTic9P

Score
10/10

Malware Config

Targets

    • Target

      cf07c60a495ec86c23426a7f5329f6de_JaffaCakes118

    • Size

      416KB

    • MD5

      cf07c60a495ec86c23426a7f5329f6de

    • SHA1

      70a924091ace3b6fdad8d10b1522872e6d9a4f7e

    • SHA256

      8285128e830652472b1bb859e8a49242d4ee9f03de739d2b4185c7a4ef949a3b

    • SHA512

      b31da22b3981ff6452012e4e894c5b71e5dede62c37fd4e05eac95a786865c8c8d077f0dba621b5df22a58a61aa3dbbe8fb3755b4a0280b7aa08231349d13c28

    • SSDEEP

      6144:KvXjjhIUHT14NhXGN/+H9EDFB2MzsSp+EDFAI6gCWNge4c9SZa:KvXjjhIWTyW5+dEp2ZEDX6gTic9P

    Score
    10/10
    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Matrix

Tasks