Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10-01-2025 22:47
General
-
Target
JaffaCakes118_f04d67fb2d94c427d9b495a79ecdeaf7.exe
-
Size
432KB
-
MD5
f04d67fb2d94c427d9b495a79ecdeaf7
-
SHA1
212eac7a9902911e04ed4f4cf8262e0f3aaa2b67
-
SHA256
bd6ffe1719b94f397f7de076e123355fe1d261e91c9c77a83d2dab7c4151ce34
-
SHA512
addc33e0999d92fb543d46354c3d2757cc595189a895e0160927e07d81e4ae0fe6ee7f2eb37e6eab6bde85e77220d60d74c60b4083337215e7c4edf8164319a0
-
SSDEEP
12288:pUCmZiCgsNIOCYIjHkYjl3H/V6tmzUBS+K4jl:TCgsNtNIjHkqPUsSZ
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_f04d67fb2d94c427d9b495a79ecdeaf7.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_f04d67fb2d94c427d9b495a79ecdeaf7.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
592KB
-
Filesize
1.0MB