Analysis
-
max time kernel
92s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03-01-2025 22:04
General
-
Target
JaffaCakes118_7081bdd7ae3fb9eab717cc10852eb1da.exe
-
Size
416KB
-
MD5
7081bdd7ae3fb9eab717cc10852eb1da
-
SHA1
dfc5f92cb4340d605396afe8eabfb638bbd16833
-
SHA256
21c8db7e654e1c0e0221b625108ae39e16e4f1f59b553d7420f4365b2b51c484
-
SHA512
dbe9a09b0c7b186212bdad1a76021a00b0e1be274c3e6b9b5880adb8f38f885a95538003c01242c1dfaa575296dd3925759dea3fead028d2a0b74c9996aeefb2
-
SSDEEP
6144:U9exUo4FtzzQyL8F+cptvDDNKTJa5kDVAobKyrQVBOs2tXR:U9+747pLc+yvkogmowUs2th
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7081bdd7ae3fb9eab717cc10852eb1da.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7081bdd7ae3fb9eab717cc10852eb1da.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
1020KB
-
Filesize
588KB
-
Filesize
1020KB