Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

14a28bfdb3...18.exe

windows7-x64

10

14a28bfdb3...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14a28bfdb3d235b371538cd02a9637ac_JaffaCakes118

  • Size

    181KB

  • Sample

    241004-x3d59sweke

  • MD5

    14a28bfdb3d235b371538cd02a9637ac

  • SHA1

    383c2a2e653a7f1759d3ba2a5a9666862d03ef2f

  • SHA256

    b33dc09ffab5de62283ee38a919286d3d454f25909951bb592d0bb44f9445207

  • SHA512

    d14775c1a203edee644ee4dc733ef8d83f2b99fc572c4bf0acd23bb0a45229bd209db716bd123e6b641ecbcd958b1bc35148359d00f31e8f5d508a159a38de6a

  • SSDEEP

    3072:R/iTVZ6xJtKHPuUN2qR5oAKmhFI+7LytNKE6knXG79HhDd3V6m04O9MOhNIxk6Eu:Bepvu20B2QNXVGhddBAMc6xk6

Score
10/10
expirobackdoordiscovery

Malware Config

Targets

    • Target

      14a28bfdb3d235b371538cd02a9637ac_JaffaCakes118

    • Size

      181KB

    • MD5

      14a28bfdb3d235b371538cd02a9637ac

    • SHA1

      383c2a2e653a7f1759d3ba2a5a9666862d03ef2f

    • SHA256

      b33dc09ffab5de62283ee38a919286d3d454f25909951bb592d0bb44f9445207

    • SHA512

      d14775c1a203edee644ee4dc733ef8d83f2b99fc572c4bf0acd23bb0a45229bd209db716bd123e6b641ecbcd958b1bc35148359d00f31e8f5d508a159a38de6a

    • SSDEEP

      3072:R/iTVZ6xJtKHPuUN2qR5oAKmhFI+7LytNKE6knXG79HhDd3V6m04O9MOhNIxk6Eu:Bepvu20B2QNXVGhddBAMc6xk6

    Score
    10/10
    expirobackdoordiscovery

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks