Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
05-01-2025 08:48
General
-
Target
JaffaCakes118_98a45327660379241334212650e4d832.exe
-
Size
406KB
-
MD5
98a45327660379241334212650e4d832
-
SHA1
10b394bc2da0d74b8d13bac6c33c2bf3662a5fa4
-
SHA256
5868296f7757e0dc11eaa223424b8f5293799314cfa4f56ed94d21490b61ff25
-
SHA512
3e6671888143e6518d289c5f0a7b6c77d80192ef2587adab5e2f26e5d9780cf3e3247f35daa0e314d688f4039c65c3e04eb9b40355a93e45279ee22bc706478a
-
SSDEEP
6144:CIzfx0tsmxGjd9suGjgIDhAJSbnVrw8/LppZ2oqIqOEhspJ:dfqOwGTlWjN0Qrw62obqap
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_98a45327660379241334212650e4d832.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_98a45327660379241334212650e4d832.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
1012KB
-
Filesize
588KB
-
Filesize
1012KB