Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
01/01/2025, 09:33
General
-
Target
JaffaCakes118_4ff097a3e64c41c6959fe440e83182d0.exe
-
Size
528KB
-
MD5
4ff097a3e64c41c6959fe440e83182d0
-
SHA1
cdd09c046e595d371a779d9350fb68681893fe3d
-
SHA256
512a38d5c05111565fec4c348b6097d555c2eac8c79c8dce9f811ac3a48d3a4c
-
SHA512
a7ba070193151d8e5574a8f7aa463888d7d48dd265584b426df6493ab95c041604cf38d119fcb34f39dbc56cb7568938b8e510e6d2c714f7be9b15c09ac34652
-
SSDEEP
12288:8RW9NZ6QqR2tzQpCmjCYsOPST/MhVl1cJ6Q5joTeRH6R:SWNqR2+STc1ujo616
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_4ff097a3e64c41c6959fe440e83182d0.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_4ff097a3e64c41c6959fe440e83182d0.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
1.6MB