Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
05-01-2025 00:07
General
-
Target
JaffaCakes118_7e37bba13ad4ff7edc24c77195ff84a3.exe
-
Size
415KB
-
MD5
7e37bba13ad4ff7edc24c77195ff84a3
-
SHA1
563c27d82b127321a12c2710411e1a5a1f4e6cab
-
SHA256
81e33e3125fc8886e6d214369d273e5ae9b64ede9103d587eef80884f882b929
-
SHA512
b171bec06ee13a0e7da6887ea0f0a47bb9b901c799e41c15bd44ddc8b44505abc8058f715dd7db1221dfd2f5d696b4a2e3b2302c08487e9e0085278a34cb4da1
-
SSDEEP
12288:DrQyKsio1k0GQAbGLX8S9FTzhYHPDW0ba:DrQyKsioK0GLAXFCH7WP
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7e37bba13ad4ff7edc24c77195ff84a3.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7e37bba13ad4ff7edc24c77195ff84a3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB