Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
07-01-2025 13:36
General
-
Target
JaffaCakes118_65f3b55327f5f7c9547990f7ea79d51f.exe
-
Size
415KB
-
MD5
65f3b55327f5f7c9547990f7ea79d51f
-
SHA1
094883b32312a4a6a7353c334b37ca99ca7958e4
-
SHA256
b2740b5a7fcd9ab2d4504affb18c53a0876d678983fe29a4bb61ad50746f2d15
-
SHA512
dd72205921c2eb40383703932b04900611ee4e95cc0d8d8117a6a13d23734e5a629734e75f11b2e51e17164aa39633e024714f4c0ec09de0a9fcea4d7d20bc72
-
SSDEEP
12288:ZrLyKsiGF7mBPINNvNSbBZMkAzjLLZWIGC4pB15:ZrLyKsig7m+NvNSErzDYIG7zn
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_65f3b55327f5f7c9547990f7ea79d51f.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_65f3b55327f5f7c9547990f7ea79d51f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB