Overview

overview

10

Static

static

3

e084126734...18.exe

windows7-x64

10

e084126734...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e08412673407254f52ea7bc40fbc3bf6_JaffaCakes118

  • Size

    416KB

  • Sample

    240406-krvmnafd73

  • MD5

    e08412673407254f52ea7bc40fbc3bf6

  • SHA1

    1dd5ff0b7f65aad8f14ab52542768f5893a913bd

  • SHA256

    579bc3593e099179036f085700d1eed64180ce36588d85583dc91304cf393eab

  • SHA512

    acd1774eefe1dee0f6e9d862fac52e3fb846e346d282891c1bdce8a3eb489770bbfdcd73f9f2748b1c45badb264c392ee498e42fff735f9e6c27e9390771b951

  • SSDEEP

    12288:tLjViy9ZYUQcIl38KZjQg0prnAbiKusJ2:RjVigZYd5RZjQvpr0fJ

Score
10/10
expirobackdoor

Malware Config

Targets

    • Target

      e08412673407254f52ea7bc40fbc3bf6_JaffaCakes118

    • Size

      416KB

    • MD5

      e08412673407254f52ea7bc40fbc3bf6

    • SHA1

      1dd5ff0b7f65aad8f14ab52542768f5893a913bd

    • SHA256

      579bc3593e099179036f085700d1eed64180ce36588d85583dc91304cf393eab

    • SHA512

      acd1774eefe1dee0f6e9d862fac52e3fb846e346d282891c1bdce8a3eb489770bbfdcd73f9f2748b1c45badb264c392ee498e42fff735f9e6c27e9390771b951

    • SSDEEP

      12288:tLjViy9ZYUQcIl38KZjQg0prnAbiKusJ2:RjVigZYd5RZjQvpr0fJ

    Score
    10/10
    expirobackdoor

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks