General

  • Target

    d5b0d98e788fdede4ad2472a18b4d508_JaffaCakes118

  • Size

    7.3MB

  • Sample

    240909-fm4mjsvgqc

  • MD5

    d5b0d98e788fdede4ad2472a18b4d508

  • SHA1

    4644d73f4509794996078c6652b9bd3f1e0667f4

  • SHA256

    d39241c692b5f612e9ccb11119fa3cdd3e4076170bac9ed929925116edfc135f

  • SHA512

    97db6e0b1ab033db205570f07e0a3fdec3bd8099d6531a042dba4926d9037b58ef750d84a66476d07f2ff02227e51b1b596efab2af71586976c19e6770457ed3

  • SSDEEP

    98304:pxC3ud6MOIvysiwCQKzo5qphIHVruP3WpF3UdE1hZHEdLFwmil+:uGQFMkhgJuP32+dmhZk/m

Malware Config

Targets

    • Target

      d5b0d98e788fdede4ad2472a18b4d508_JaffaCakes118

    • Size

      7.3MB

    • MD5

      d5b0d98e788fdede4ad2472a18b4d508

    • SHA1

      4644d73f4509794996078c6652b9bd3f1e0667f4

    • SHA256

      d39241c692b5f612e9ccb11119fa3cdd3e4076170bac9ed929925116edfc135f

    • SHA512

      97db6e0b1ab033db205570f07e0a3fdec3bd8099d6531a042dba4926d9037b58ef750d84a66476d07f2ff02227e51b1b596efab2af71586976c19e6770457ed3

    • SSDEEP

      98304:pxC3ud6MOIvysiwCQKzo5qphIHVruP3WpF3UdE1hZHEdLFwmil+:uGQFMkhgJuP32+dmhZk/m

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Enterprise v15

Tasks