Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
09/01/2025, 14:28 UTC
General
-
Target
JaffaCakes118_ca89a4a95e02c983d0dea4f436b1b6cb.exe
-
Size
415KB
-
MD5
ca89a4a95e02c983d0dea4f436b1b6cb
-
SHA1
4c470783ac069be6c346de512d6cf5d41032e1c1
-
SHA256
baf5cc82467581211e49787174cfa5eb4c88db90b94a221b8a2647f830fcd6e2
-
SHA512
ca49e0cc427d0543ad766ababc63f76fdf0ac174f1343f3c37377c4c4f17f5cc41763794d0feda51e1b3b87cc89a62a422e1821df79372cc5f152bea7fcc7a33
-
SSDEEP
12288:Hr8yKsihyU4otoUr05sbR4XQuwRfzE6UgfcA:Hr8yKsioU42nhbqQuwLfD
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ca89a4a95e02c983d0dea4f436b1b6cb.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ca89a4a95e02c983d0dea4f436b1b6cb.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB