Analysis
-
max time kernel
95s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-01-2025 09:31
General
-
Target
JaffaCakes118_1bd3862e789f631ab45e8b57713691a0.exe
-
Size
432KB
-
MD5
1bd3862e789f631ab45e8b57713691a0
-
SHA1
6de55bad002ed1425b624a37fa78e6ebf2f33b69
-
SHA256
1ec418897af162ab1da32b978afcd5e8733f250f929d87b37e86ddd0ac7be3af
-
SHA512
632425ca13245db2b7635e85e49024e02df8ab42b5eb71877ad7534ff47c5aac9cacda1868458b184c606f37ba94ae60ac4dbcdd8ab2c886b6d478b5a7a7d2c1
-
SSDEEP
12288:ZUCmZiC6Cysh1rvbZ+C/q4NoNMy8IcZP+MEgOW:jC6GPn/q4NrIcI6
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1bd3862e789f631ab45e8b57713691a0.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1bd3862e789f631ab45e8b57713691a0.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
592KB