Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-01-2025 12:58
General
-
Target
JaffaCakes118_a5b9ee019bbea507803d6316b2b77420.exe
-
Size
432KB
-
MD5
a5b9ee019bbea507803d6316b2b77420
-
SHA1
1254eb3aa35985351c739fc46b4ff224a96205a1
-
SHA256
a849542a93bd718ddde36903cbc3f8744f3849a8e24909dce87fb1ca06e7fdaa
-
SHA512
7203816e046f68b93cf6515b25c7fcf8064799ebdea9040f3f7329907ee287b1d17d6ddccbe30b5789d77a49d49c26304e35a87e018a5753628c46f0b234f48a
-
SSDEEP
12288:BUCmZiCLv/1LpzoGmkGS6l1z6gbcB5n+F:7CT9Lpzv5Gv76xa
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_a5b9ee019bbea507803d6316b2b77420.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_a5b9ee019bbea507803d6316b2b77420.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
1.0MB