Overview

overview

10

Static

static

3

dc64fb8919...18.exe

windows7-x64

10

dc64fb8919...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc64fb891964a7694201dc450ccc7a4f_JaffaCakes118

  • Size

    482KB

  • Sample

    240406-f6nqfabf9v

  • MD5

    dc64fb891964a7694201dc450ccc7a4f

  • SHA1

    cb214a7979e99b4445610d2e2064ae90c6146053

  • SHA256

    49743c2e8e3d1ff87eb95d633804f3e215a344323699085096b5e832b3ae55dc

  • SHA512

    875cb330fb155b77961f1d8075915764d9effa4bdfbae568feb39d622583552cb5fac8d8ed196f520e8d2b5dbe4d49d7fc23552d71d2eb5c9baa7aaccd5b5362

  • SSDEEP

    6144:wJxMdy+42CUfNDDCLawEBa9CrxJCkOzzxeEpysla4+oybZU+g22zlcUfn/uTHqVw:huEUyHOFeEgslVblDzlcUux8crCcJ

Score
10/10
expirobackdoor

Malware Config

Targets

    • Target

      dc64fb891964a7694201dc450ccc7a4f_JaffaCakes118

    • Size

      482KB

    • MD5

      dc64fb891964a7694201dc450ccc7a4f

    • SHA1

      cb214a7979e99b4445610d2e2064ae90c6146053

    • SHA256

      49743c2e8e3d1ff87eb95d633804f3e215a344323699085096b5e832b3ae55dc

    • SHA512

      875cb330fb155b77961f1d8075915764d9effa4bdfbae568feb39d622583552cb5fac8d8ed196f520e8d2b5dbe4d49d7fc23552d71d2eb5c9baa7aaccd5b5362

    • SSDEEP

      6144:wJxMdy+42CUfNDDCLawEBa9CrxJCkOzzxeEpysla4+oybZU+g22zlcUfn/uTHqVw:huEUyHOFeEgslVblDzlcUux8crCcJ

    Score
    10/10
    expirobackdoor

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks