Overview

overview

10

Static

static

3

177de8455a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    177de8455a7e82315e1da7210a46234d_JaffaCakes118

  • Size

    416KB

  • Sample

    240627-zqyegssgkj

  • MD5

    177de8455a7e82315e1da7210a46234d

  • SHA1

    6755d20ba994e1a2439c38b504bec0cbab7b3d0c

  • SHA256

    22fb4c468f43906a916bb27007b0d73349be026dbd3e4a678d2bb8983a57a599

  • SHA512

    bcba5bd5ae640b2eacfd037815406afd38c744c466a54378113cfc44e673a8105d243233f7e6312063c277e82ec19f608c6b3caacc8c7e40eae7c213487770f9

  • SSDEEP

    6144:UKlFieEkP/KNaaUHZC9XHI/5j1M96227Pvaj8/skVCHXg8YH41BIC:UEieExNJq1M96FPu+1CHXg8YY1BI

Score
10/10
expirobackdoor

Malware Config

Targets

    • Target

      177de8455a7e82315e1da7210a46234d_JaffaCakes118

    • Size

      416KB

    • MD5

      177de8455a7e82315e1da7210a46234d

    • SHA1

      6755d20ba994e1a2439c38b504bec0cbab7b3d0c

    • SHA256

      22fb4c468f43906a916bb27007b0d73349be026dbd3e4a678d2bb8983a57a599

    • SHA512

      bcba5bd5ae640b2eacfd037815406afd38c744c466a54378113cfc44e673a8105d243233f7e6312063c277e82ec19f608c6b3caacc8c7e40eae7c213487770f9

    • SSDEEP

      6144:UKlFieEkP/KNaaUHZC9XHI/5j1M96227Pvaj8/skVCHXg8YH41BIC:UEieExNJq1M96FPu+1CHXg8YY1BI

    Score
    10/10
    expirobackdoor

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1

MITRE ATT&CK Matrix

Tasks