Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
04/07/2024, 00:26
General
- Target 221104fcb7236573113f399110b71e82fec442396fd5cb1c93f431e4a2c2993d.exe
- Size 592KB
- Sample240704-arkscatgqq
- SHA256 221104fcb7236573113f399110b71e82fec442396fd5cb1c93f431e4a2c2993d
Score
10/10
Malware Config
Signatures
- Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
- Expiro payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\221104fcb7236573113f399110b71e82fec442396fd5cb1c93f431e4a2c2993d.exe"C:\Users\Admin\AppData\Local\Temp\221104fcb7236573113f399110b71e82fec442396fd5cb1c93f431e4a2c2993d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1120-0-0x0000000001000000-0x00000000011B9000-memory.dmp
memory/1120-1-0x0000000001006000-0x0000000001008000-memory.dmp
memory/1120-2-0x0000000001000000-0x00000000011B9000-memory.dmp