Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12-12-2024 05:41
General
-
Target
e4f39dba12ef0be0f2a717d453770a07_JaffaCakes118.exe
-
Size
416KB
-
MD5
e4f39dba12ef0be0f2a717d453770a07
-
SHA1
b12de61b9ded973f9efa73de4a9d86be489aade8
-
SHA256
76c497c8336370e40615361f6cc61f2066035c546da7cbafb0b10f251b8d98de
-
SHA512
9bf4e7614f45410d0aebb78f7a96bc0327707eb8ebd17b52292f3a805b57ce66f5f3b9efbc13885e6ad57a9df0553938774de49eca27752eeb4a1bececc6f0f5
-
SSDEEP
6144:hbQ40wsyzK9aEhRtKAIrbfSYp5HZSc3YTEyNzmJMvlb1i8Cu5kZU:hbT0ePElInqYXH8Aydmyb1ilu2ZU
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e4f39dba12ef0be0f2a717d453770a07_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e4f39dba12ef0be0f2a717d453770a07_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1020KB
-
Filesize
1020KB