Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
31/12/2024, 21:23
General
-
Target
JaffaCakes118_37bbed81fc35bf98cd3cf874119b9604.exe
-
Size
406KB
-
MD5
37bbed81fc35bf98cd3cf874119b9604
-
SHA1
9fbc0c9af3393a2c67083291112fb624e535b460
-
SHA256
fc086c346144e6cf4415a81a7e9cbccdb50f820d8440df8e4460b9627b1f52eb
-
SHA512
1b8cbc0018204113caca12a05fb2d6e491174411e9561935ecc4ca69bd1e00f7710966d3c7975b64c6dfb0535c7ecb67fef0bccaaa874845fc26430ed70af903
-
SSDEEP
6144:5Izfx0tsmxGjd9suGjZIDhAJSbnVrw8/LppZ2oqIqOEhspJ:UfqOwGTlWuN0Qrw62obqap
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_37bbed81fc35bf98cd3cf874119b9604.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_37bbed81fc35bf98cd3cf874119b9604.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
1012KB
-
Filesize
1012KB
-
Filesize
588KB