Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
09/01/2025, 21:05 UTC
General
-
Target
JaffaCakes118_d2605cb93cb77384fff7bbd368e7c456.exe
-
Size
415KB
-
MD5
d2605cb93cb77384fff7bbd368e7c456
-
SHA1
dd16d2c79f6421da03e19b36ff460842d73864f3
-
SHA256
2cc7826d740fae523d6e8ecc0da9489b33bced11d391e0b07f7f688b6e293981
-
SHA512
f1a18a5daff35138284344a5fe20d15d58dd30d58a2b419aefaf03ab08369d20aad9470ba53a30642f82a784df580b3d75626d2d1110692f69cbdc7f42d5ef56
-
SSDEEP
12288:drvyKsiX7VMLCkqm9S93FcCgg6IIT2pIbO8Eq5GP1mdr:drvyKsiLAxEcNgjpj8ECF
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d2605cb93cb77384fff7bbd368e7c456.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d2605cb93cb77384fff7bbd368e7c456.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB