Analysis
-
max time kernel
94s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09-01-2025 12:50
General
-
Target
JaffaCakes118_c8883542ec5a9504b68c2c97e0135b84.exe
-
Size
432KB
-
MD5
c8883542ec5a9504b68c2c97e0135b84
-
SHA1
859fb399ae02b956573b143c7991cc3737c33c14
-
SHA256
aea83b9604b40719fa6c935eeb9991e95b6d86347c2e07304464d6771c028956
-
SHA512
e99b9ea222473ea6ffcb50f8bbb7700d20f0b4fe4e21c041fb3ddcee80d08b6c1e7bcd0eec75adf394cc9355b438e3c6307d585f6826c7ea317d95beed3551d3
-
SSDEEP
6144:eFUCmZqoFWC6xUqYVz9TsVUJk6XS4Xp9dqv786qH2h3ghmJju72d11ZVwTgRIVy1:uUCmZiCL9LbCa9dMOJSjld1SA
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_c8883542ec5a9504b68c2c97e0135b84.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_c8883542ec5a9504b68c2c97e0135b84.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
592KB