Analysis
-
max time kernel
94s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
31-12-2024 18:36
General
-
Target
JaffaCakes118_2f12525e07f0311fa3cde98ef5c3d0e5.exe
-
Size
432KB
-
MD5
2f12525e07f0311fa3cde98ef5c3d0e5
-
SHA1
45d874b70ca596bad9a313a2e662d6f3849bb42d
-
SHA256
58ac4af4bec24b23f41b32365dff72b93fb96ac955a7daf204796f3572a230ad
-
SHA512
e3a2d0bcd4a80c11a67d18c03fa4672b9a9bdc67bef8249c1b488eb8efba9375ceb9d5b89f1570f5566317c649da4c1db80ccc6c5aeeb50b0befdeb5a2d5a36a
-
SSDEEP
6144:3FUCmZqoFWC6xud5QO6wmUvN8vnC1jUHc4oWwgGhRJ8GgGOF5muGebFDDrilooAS:VUCmZiC1d/67ngj4AcOerid8Z198x
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2f12525e07f0311fa3cde98ef5c3d0e5.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2f12525e07f0311fa3cde98ef5c3d0e5.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
1.0MB