Analysis
-
max time kernel
93s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-01-2025 01:26
General
-
Target
JaffaCakes118_82806a29fa27decea239bf8f59dce324.exe
-
Size
416KB
-
MD5
82806a29fa27decea239bf8f59dce324
-
SHA1
3c089a814d0206dbc36f6d2613d3abcd71641b8c
-
SHA256
4f9f7fae58f884c9e712539a92da926d1c53538cc96943178a81cf7ab6c07535
-
SHA512
f2df1d550ce1a8ddb8bf4fe115616ff1a1e8aeab148048bbe9f268a242effd969cfb4e119145efecfe734f01fe63807bcdf0b953fe6be068eb11e53b0527508e
-
SSDEEP
12288:M0TV3rtnWAsdFTvbNjjSXN2mEmFioL1rny:Mm9hW3d5RjjCs02
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_82806a29fa27decea239bf8f59dce324.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_82806a29fa27decea239bf8f59dce324.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
1020KB
-
Filesize
1020KB
-
Filesize
588KB