Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...e6.exe

windows7-x64

10

JaffaCakes...e6.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2025, 09:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JaffaCakes118_fd629d89a49c0fa9376f08351676ace6.exe

  • Size

    415KB

  • MD5

    fd629d89a49c0fa9376f08351676ace6

  • SHA1

    1aeb12ac5aa2fad19f032fb780fa8c028c5f6ddd

  • SHA256

    5fe5e2861f87eb45375de51856cbce7e7b56fb28f486372ee2c91356e4338f48

  • SHA512

    988deecdb33e8b796de293e322f4876d2735d33f63974e94e00af3264a6670356c9b38ea44193f62319698ab7a0b43fdb449a9c8958a6fef44afc4e8f7eb8cc2

  • SSDEEP

    6144:lrTyKsi3UfohWEGmNO2/hFJM9gRY+e2at8cxY7FwWKq5XsN:lrTyKsi3moJGmQK7JMZX8cxY7Fw/ys

Score
10/10
expirobackdoor

Malware Config

Signatures

  • Expiro family
    expiro
  • Expiro, m0yv

    Expiro aka m0yv is a multi-functional backdoor written in C++.

    backdoorexpiro
  • Expiro payload 4 IoCs
    backdoor

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_fd629d89a49c0fa9376f08351676ace6.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_fd629d89a49c0fa9376f08351676ace6.exe"
    1⤵
      PID:2832

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2832-0-0x000000000084B000-0x00000000008DE000-memory.dmp

      Filesize

      588KB

      Download

    • memory/2832-1-0x000000000084B000-0x00000000008DE000-memory.dmp

      Filesize

      588KB

      Download

    • memory/2832-2-0x00000000007E0000-0x00000000008DE000-memory.dmp

      Filesize

      1016KB

      Download

    • memory/2832-3-0x00000000007E0000-0x00000000008DE000-memory.dmp

      Filesize

      1016KB

      Download