Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
31/12/2024, 15:07
General
-
Target
JaffaCakes118_23d50d2db0a1f099551d0aab4e5df869.exe
-
Size
432KB
-
MD5
23d50d2db0a1f099551d0aab4e5df869
-
SHA1
bcf1090af07c90f902249c2a6a39362693d059ec
-
SHA256
c105f71b2173e0f559449a1ff6bdda189776714ad7883a2630e48f50bf79c608
-
SHA512
91a07ba30b991dd4ebf21656d529635dc43ad3ec5b8a196208d367009e0a1f82088dc857ea48f7fbb97056f3d4cebf63f090273f937dd81b11383691a5d5b6e9
-
SSDEEP
6144:uFUCmZqoFWC6x3GmLh/QKJrhbdDd25flm52iip0Rfjm8WXCzGStjLS9:+UCmZiC9mLh/FrhhDsVWrjhWXxSNS
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_23d50d2db0a1f099551d0aab4e5df869.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_23d50d2db0a1f099551d0aab4e5df869.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
1.0MB