Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-01-2025 22:26
General
-
Target
JaffaCakes118_3df4852dd4a8355906666870fbd5e99b.exe
-
Size
432KB
-
MD5
3df4852dd4a8355906666870fbd5e99b
-
SHA1
1100ded13df02e5f3fa09721321e873ac961ce4d
-
SHA256
1cf81c9f8b9bd7c484a6b477c43c92602321a9d151aed6ba7eae91c0275ecba6
-
SHA512
28ae8dac07d24b29b8284491f22a10bc9c1044ace7569440a886c2cc583685e67d19c382670552a7d798b5e534039132d97b4576b76298c907e050a30b45b4fc
-
SSDEEP
12288:PUCmZiCq5duzyJUTdMlgumcvQsFebzt6:BCVQY5zt6
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3df4852dd4a8355906666870fbd5e99b.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3df4852dd4a8355906666870fbd5e99b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
592KB