Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/12/2024, 10:27
General
-
Target
ff7ef70cc44d5e697cebe6e3005e3cc3_JaffaCakes118.exe
-
Size
416KB
-
MD5
ff7ef70cc44d5e697cebe6e3005e3cc3
-
SHA1
d99dee8eeaf24209353ee7870c6d05c3feefa2bf
-
SHA256
b01363a588a49c462d30c4821938b4156877224d586d2d82cc4b94ad243ac952
-
SHA512
f93f18876eca5a679046a298d98e02535848448a8f7d652c8597ef5378f30ae5c966ce8530f38e8459b7320df9ff4406a4de2900f5565210c0dc2ca7b86d961f
-
SSDEEP
6144:lmzaBfxRPJb+dC85MMp7v3SyqzuFF/0qpsocSJwL3CQvws0Rvgu7qlL8+Olk:lmmBfxf2Pp71F/4o5weQYsUT7EzOl
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff7ef70cc44d5e697cebe6e3005e3cc3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ff7ef70cc44d5e697cebe6e3005e3cc3_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
1020KB
-
Filesize
588KB
-
Filesize
1020KB