Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
07-01-2025 01:02
General
-
Target
JaffaCakes118_448f5e199faafd800655ccc1e096ffa9.exe
-
Size
415KB
-
MD5
448f5e199faafd800655ccc1e096ffa9
-
SHA1
87bafac9df74ad3cebb50e1dc1214060ae0e1eca
-
SHA256
bd6364595c47ba974e31f6eda78bf7a7384f92f64e645548b3d42f2eb3c21e9c
-
SHA512
8645109afa17add1a1813c0b303018abe78bea8327768621658a3b7a141557421afe5ea32cf5197573e66435f790a14d8bcc6a776b95ebf434b6d79e57b77931
-
SSDEEP
12288:/rsyKsi6Ye+0GjbZxWhMF77904n8FTyHOXxaAjY:/rsyKsi6J+BbZA07y4ATy/AM
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_448f5e199faafd800655ccc1e096ffa9.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_448f5e199faafd800655ccc1e096ffa9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB