Analysis
-
max time kernel
95s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
31-12-2024 16:19
General
-
Target
JaffaCakes118_27c3c71ae2668a94423a8b62935af9d9.exe
-
Size
416KB
-
MD5
27c3c71ae2668a94423a8b62935af9d9
-
SHA1
a81e966770805ac711c27d41703bdfb22fb8d155
-
SHA256
94cc76263e89da07babac5fcd203e2e4d45a080a038138feaf516a0efc276bb0
-
SHA512
06aceb73c715981302893feb6d4a1941f18dcc4b3e515ca214eb07a123d82211a3973e8c95b53a24e675ac24819c8c892be402a723f811978a17d61a7de77263
-
SSDEEP
6144:mPXOMLURz8q802Koi1uQId2eH7awQl4S6lKGzf3sVBCqgiecB5ecbD4DTF:mPeMiw+oxrbkGS6l1z6gbcB5n+F
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_27c3c71ae2668a94423a8b62935af9d9.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_27c3c71ae2668a94423a8b62935af9d9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
1020KB
-
Filesize
588KB
-
Filesize
1020KB