Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
08-09-2024 09:17
General
-
Target
d405372467a08b85f9ca7fdf8c5d5863_JaffaCakes118.exe
-
Size
415KB
-
MD5
d405372467a08b85f9ca7fdf8c5d5863
-
SHA1
a67d2ea2a7b89c383635f82bfc3b18466e788968
-
SHA256
6c6ef6dde76387417db441b67e60d2b0a4bb37888f2faad751da11793abd017e
-
SHA512
fbc35621c1910ef60ce19ff5f85bfc6ab2471645d2c36e730df316ea9a7be16dc32642c9105d43d33e90cec12608d962889402b66338b2187f58be4870d78964
-
SSDEEP
12288:+rSyKsinPgBBa8x2T8xzw8VRTdRoMWYokReWEUfNEn:+rSyKsinPgu8jheMWTQTE+
Score
10/10
Malware Config
Signatures
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d405372467a08b85f9ca7fdf8c5d5863_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d405372467a08b85f9ca7fdf8c5d5863_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB