General

  • Target

    3fa286fc2daa0398a2164df8db11f38f_JaffaCakes118

  • Size

    437KB

  • Sample

    241013-nslmxsvapa

  • MD5

    3fa286fc2daa0398a2164df8db11f38f

  • SHA1

    84b37bf113799dd0f03b3d7fab680e239550e901

  • SHA256

    f8b6b750bb23c6d2ff2af16454cbcb0c004300997d5d72ba9241dd1f3b5a4831

  • SHA512

    2a3141be7249e2ac2c9aec2f3a000054f7a8994133d1c6195ca90c3cb93a72b638ecf05339707a860541edba8e2cbd7c6f85fc070f77890e1d980dd9912d258c

  • SSDEEP

    6144:Uhtwm2NOzPSK5U2SoJ8VWackeV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:7rLK5U2Soys1mwLQcUqgsPBYv745B

Malware Config

Targets

    • Target

      3fa286fc2daa0398a2164df8db11f38f_JaffaCakes118

    • Size

      437KB

    • MD5

      3fa286fc2daa0398a2164df8db11f38f

    • SHA1

      84b37bf113799dd0f03b3d7fab680e239550e901

    • SHA256

      f8b6b750bb23c6d2ff2af16454cbcb0c004300997d5d72ba9241dd1f3b5a4831

    • SHA512

      2a3141be7249e2ac2c9aec2f3a000054f7a8994133d1c6195ca90c3cb93a72b638ecf05339707a860541edba8e2cbd7c6f85fc070f77890e1d980dd9912d258c

    • SSDEEP

      6144:Uhtwm2NOzPSK5U2SoJ8VWackeV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:7rLK5U2Soys1mwLQcUqgsPBYv745B

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Enterprise v15

Tasks