General

  • Target

    a8a80bf223db4eace6ed977dfa63af4478759305ff758ca8fd814166e546bd0e

  • Size

    1.7MB

  • Sample

    240826-j5r81swajr

  • MD5

    08b311f6a8773036d5fef73465107931

  • SHA1

    b3ecfe507b84c06bf0b889d9499992e28086c786

  • SHA256

    a8a80bf223db4eace6ed977dfa63af4478759305ff758ca8fd814166e546bd0e

  • SHA512

    bb1a7e9f68e99c9200c13af39280ec8882e351304d7ee9c065552b9bcdf91fd0ff745cd4b6df330663211a2c25793733049a3c58b4608ba9cbded9a5ddd541eb

  • SSDEEP

    49152:zKzcCyEq9DRho/ctH01Ws74rA4RUBDHgE3dqFWVCNuCWHb:zKB5qFb0I+0PqkWEkb

Malware Config

Targets

    • Target

      a8a80bf223db4eace6ed977dfa63af4478759305ff758ca8fd814166e546bd0e

    • Size

      1.7MB

    • MD5

      08b311f6a8773036d5fef73465107931

    • SHA1

      b3ecfe507b84c06bf0b889d9499992e28086c786

    • SHA256

      a8a80bf223db4eace6ed977dfa63af4478759305ff758ca8fd814166e546bd0e

    • SHA512

      bb1a7e9f68e99c9200c13af39280ec8882e351304d7ee9c065552b9bcdf91fd0ff745cd4b6df330663211a2c25793733049a3c58b4608ba9cbded9a5ddd541eb

    • SSDEEP

      49152:zKzcCyEq9DRho/ctH01Ws74rA4RUBDHgE3dqFWVCNuCWHb:zKB5qFb0I+0PqkWEkb

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Enterprise v15

Tasks