Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09-01-2025 14:48
General
-
Target
JaffaCakes118_cae99c603706e5bd00247c2fc962a18c.exe
-
Size
415KB
-
MD5
cae99c603706e5bd00247c2fc962a18c
-
SHA1
c183c27e3db1234da137d84ac246264b1e8f1542
-
SHA256
f4c6658dc9fd2f73226710828a20aa51c4027dd2ce7d15cfbbfe17904a181be9
-
SHA512
6983aa6d71575bdf94b959534b329772f25d86514c75f4413afcbde9a1a737566642e7612ec519ceb706dec82f3534dfd6d8395657e3f70fe9f76b9a9bab551c
-
SSDEEP
12288:XrkyKsiiqBU5NguybKeSMC4RlVIPoD6fy9IhWpRK4fak12i:XrkyKsiihybKeSMxIPoD6a2hcR9fakIi
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_cae99c603706e5bd00247c2fc962a18c.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_cae99c603706e5bd00247c2fc962a18c.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB