Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
08-01-2025 05:18
General
-
Target
JaffaCakes118_8d72f78543978db003970cdb96354e14.exe
-
Size
415KB
-
MD5
8d72f78543978db003970cdb96354e14
-
SHA1
68508bee773902dc320a800c7a3d01af2bfe3500
-
SHA256
2e3b2fcd479decbc0f62de6d70349e4c610f93949a481b0a787c9d5c9bf4140b
-
SHA512
d06f2beb4415ae1675e61ff328d66e8d2fe26c4b0fcbec418c841149906d5960e1781dffe40febf6885d1f77ad455bdea106775b8013c3b1f95ece33f98e809c
-
SSDEEP
6144:kr8yKsi/sR4BNvnhohL9l/QcLXMIOopu8nwvfUhhTaM7q:kr8yKsi/sRYFhyLPOknwvf27q
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8d72f78543978db003970cdb96354e14.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8d72f78543978db003970cdb96354e14.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB