Overview

overview

10

Static

static

3

274788ae43...18.exe

windows7-x64

10

274788ae43...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    274788ae4380f0b549627fe015772ed5_JaffaCakes118

  • Size

    7.3MB

  • Sample

    240706-cfpy2asepm

  • MD5

    274788ae4380f0b549627fe015772ed5

  • SHA1

    8b03b2bedb93594f2e3a741cc029760ddb93cda6

  • SHA256

    fa62c554f72889b1977fee35ea54ccaaac83dd9d3e234000a94dc020fee4b5d5

  • SHA512

    86aa2030fe4dc2ca233b830c8f457e6798c8dac0d861c4b82465b111470770e68e5a8b9f291c727fb3feef91e4308e0c4a6a44e9a3cf668216f93ec21eb01aff

  • SSDEEP

    98304:YxC3ud6MOIvysiwCQKzo5qphIHVruP3WpF3UdE1hZHEdLF4mil+:zGQFMkhgJuP32+dmhZk/O

Score
10/10
expirobackdoor

Malware Config

Targets

    • Target

      274788ae4380f0b549627fe015772ed5_JaffaCakes118

    • Size

      7.3MB

    • MD5

      274788ae4380f0b549627fe015772ed5

    • SHA1

      8b03b2bedb93594f2e3a741cc029760ddb93cda6

    • SHA256

      fa62c554f72889b1977fee35ea54ccaaac83dd9d3e234000a94dc020fee4b5d5

    • SHA512

      86aa2030fe4dc2ca233b830c8f457e6798c8dac0d861c4b82465b111470770e68e5a8b9f291c727fb3feef91e4308e0c4a6a44e9a3cf668216f93ec21eb01aff

    • SSDEEP

      98304:YxC3ud6MOIvysiwCQKzo5qphIHVruP3WpF3UdE1hZHEdLF4mil+:zGQFMkhgJuP32+dmhZk/O

    Score
    10/10
    expirobackdoor

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks