Overview

overview

10

Static

static

3

dc07333a28...18.exe

windows7-x64

10

dc07333a28...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc07333a28090eff485feb5b5c153533_JaffaCakes118

  • Size

    411KB

  • Sample

    240406-fssr8sbd8y

  • MD5

    dc07333a28090eff485feb5b5c153533

  • SHA1

    ef25a413a6c1f267e58b44b180df8988e9eec8b5

  • SHA256

    a218a1edcd7e5f4e384c412fc45c2e7917a69c7d041d99700c54efa23c55a722

  • SHA512

    345efc72999e8fbdc8c0ec9942bfd83a0448fcb2c7e010dbbfea4b880a93cf3eb78d74cad15a657d504c1082f9eeac618a39d5c37ee3cc228bd5d7cb832be5ba

  • SSDEEP

    12288:betLagza/unbxptKNWXkVTTM5ct0bDMT:bettMMbxpMNMk12c20T

Score
10/10
expirobackdoor

Malware Config

Targets

    • Target

      dc07333a28090eff485feb5b5c153533_JaffaCakes118

    • Size

      411KB

    • MD5

      dc07333a28090eff485feb5b5c153533

    • SHA1

      ef25a413a6c1f267e58b44b180df8988e9eec8b5

    • SHA256

      a218a1edcd7e5f4e384c412fc45c2e7917a69c7d041d99700c54efa23c55a722

    • SHA512

      345efc72999e8fbdc8c0ec9942bfd83a0448fcb2c7e010dbbfea4b880a93cf3eb78d74cad15a657d504c1082f9eeac618a39d5c37ee3cc228bd5d7cb832be5ba

    • SSDEEP

      12288:betLagza/unbxptKNWXkVTTM5ct0bDMT:bettMMbxpMNMk12c20T

    Score
    10/10
    expirobackdoor

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks