Analysis
-
max time kernel
104s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-01-2025 14:55
General
-
Target
JaffaCakes118_abb6094084e9faadb009befa32454da2.exe
-
Size
432KB
-
MD5
abb6094084e9faadb009befa32454da2
-
SHA1
84118e97c34db21920569437b02de00205511748
-
SHA256
be476d2260fca7fea559bfd3f4a3a1f4e29a0bf9c42ee82c548ecdb82a9f76a1
-
SHA512
b293cbb9c91df9aa6a836ecc4f4ac563d47c81d006c05c4b078832f088be1400e12455526e87720164748714e4911c6a8541c8afdfd3c4edf0c7efef55657b39
-
SSDEEP
12288:nUCmZiCiuTRB8XDVidn9RLGBiJuNTwICgx8SvVp:JCDaXBIn9RSBs4TwDWFvVp
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_abb6094084e9faadb009befa32454da2.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_abb6094084e9faadb009befa32454da2.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
592KB