Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10-01-2025 10:44
General
-
Target
JaffaCakes118_e239f3c834adcb7d484648554bc8a802.exe
-
Size
432KB
-
MD5
e239f3c834adcb7d484648554bc8a802
-
SHA1
0b1cfeb52456dc601c73836c4f3ead7ad8088f60
-
SHA256
1ed83a987610ca24108b844d4de768c7fd436ff476411848dbad55208eb7ccd3
-
SHA512
5a5bb3f61e2b5722c65fb15cfe55ec1dae719a79e6f5086ff40760f78ca0c160ba089e44111af101958e9f418f93dba48b119c251230d386c03c17f106e61c9b
-
SSDEEP
6144:WFUCmZqoFWC6xTvs6KNPoAqFGRyj6P7QjD1BUtwgrHAZMzoRvpdFLp+Qkwmx/84E:mUCmZiCH5CXozkPTdvZ4QTU
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e239f3c834adcb7d484648554bc8a802.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e239f3c834adcb7d484648554bc8a802.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
592KB