Analysis
-
max time kernel
95s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
08-01-2025 00:07
General
-
Target
JaffaCakes118_806e3e0b705e1d3c56ec724b9872c195.exe
-
Size
415KB
-
MD5
806e3e0b705e1d3c56ec724b9872c195
-
SHA1
97e239e7d3a2c8360c2632fb98ba64c61f7b3484
-
SHA256
8aa38941e16ae4f42343a8b57b94b3466152e38eaf50b2f81be9dba7a57e00ac
-
SHA512
2e57b01b15050b780836a740d132a4c38eeddf0975893ccbfcba0e67ff6a68f8d969d4cfc2c6c016009e27d8e41edcfc8677b5b653c28ff8a3ddb59ef593ac97
-
SSDEEP
12288:1rHyKsilvGJ/TAiGfeeGfGwesbVHVzRQoGg:1rHyKsiliGGeGLxhHWg
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_806e3e0b705e1d3c56ec724b9872c195.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_806e3e0b705e1d3c56ec724b9872c195.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
588KB
-
Filesize
1016KB