General

  • Target

    c5b67871b12b397585cad3482b8b1d14.zip

  • Size

    697KB

  • Sample

    240831-gpwv6ayglk

  • MD5

    501586064b3bebb5a92f83fda7026c54

  • SHA1

    d5e96005af13c74ab70fa0af841771ccac76e807

  • SHA256

    d02b7164dee6c30169e18b736e36e275a5066170da4a84a23c407fa07ee7ef8f

  • SHA512

    69e378a1575cebe6d34e12f7404fec084e69686a563f2cfd042c7b40f673d1fe8f53acc4619ced2f55426af8185a4c8dd45eb0e03f0187c29d777f580916955a

  • SSDEEP

    12288:FHrcPzqEV6Hl5U1681Gr87QHVhIyBHQMnnhADugSP25P4F1NbS0g1BETUnv+B:FLcOc6F5U1h1Gr8SVWvMnhADugS+5MSQ

Malware Config

Targets

    • Target

      7736e2923f0969b84166b05537aed354ad3f8a3e571af505daa9003838354d7b

    • Size

      1.2MB

    • MD5

      c5b67871b12b397585cad3482b8b1d14

    • SHA1

      8e1ef341018d9f1581a592514427a051f850fc30

    • SHA256

      7736e2923f0969b84166b05537aed354ad3f8a3e571af505daa9003838354d7b

    • SHA512

      5f286133e974954ea1014ad6365424847a61f5da2f83771ce713daac6b72ea669cf1b3aa3ab9775928694d07a3e4561d916fa2be5edb439160a607c268902d18

    • SSDEEP

      24576:cNQ+9+MzVdi/JZgQzYM65mpXNgbUDGTgl1Y9IrQig38jNayXJUtt:I9HhQBuM65mp9DG0l1Y9IrQBMjXJ

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Enterprise v15

Tasks