Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02/01/2025, 18:23
General
-
Target
JaffaCakes118_6736e5952fe73a2f7eaa2414d743e900.exe
-
Size
612KB
-
MD5
6736e5952fe73a2f7eaa2414d743e900
-
SHA1
6ea978beb7d992d888dfcde63fc5b186afa34626
-
SHA256
3a51283c3dbf9bb13031192feb933d3ff7d7f7348dc6e7aaa12444fe1c9707de
-
SHA512
1a08b80fb72bc7d9311f2652ec520988b1197507dd7b2bff0572384e506091bfde4013c95820b3247a13abd99b3382a8a3ddf11067363ca7a2aeae820d274106
-
SSDEEP
6144:1dLb0PdwwtNgVVWQ7tRR4ohLV66X1rlYcD088OTDhiQ/KqlrO5hFNy:7LIlOVReohLNj/N8ki+KqNgv
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6736e5952fe73a2f7eaa2414d743e900.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6736e5952fe73a2f7eaa2414d743e900.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
392KB
-
Filesize
392KB
-
Filesize
1016KB
-
Filesize
1016KB