Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
10-01-2025 14:58
General
-
Target
JaffaCakes118_e72a4797da67ec75bc15d76537a9bea5.exe
-
Size
415KB
-
MD5
e72a4797da67ec75bc15d76537a9bea5
-
SHA1
2dca0df8c634949f482397fd1e3e06b6ce02dcd9
-
SHA256
f4c9e0bdd2527fa5ec8e48ac823b53210c14e78e3bc56c66074a355cfda5939a
-
SHA512
efb605bc8a883d82b058684b0cf8671fbe6c6236989624369a8d6f7f11ef58c31b7dc7f58cf812b958241eed7ffa6b3c4e423815142982e994191432b2ba0a32
-
SSDEEP
12288:IryyKsiauC0EOZq73PFsxxZu7k9KToIuZtH:IryyKsim0Egq7/FExZnKToIuZ
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e72a4797da67ec75bc15d76537a9bea5.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e72a4797da67ec75bc15d76537a9bea5.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
588KB
-
Filesize
588KB
-
Filesize
1016KB
-
Filesize
1016KB