Overview

overview

10

Static

static

3

628e8e8f4d...b6.exe

windows7-x64

10

628e8e8f4d...b6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    df2d7668906396625694e3cebaa3f854.zip

  • Size

    293KB

  • Sample

    240901-x8zzxszhpe

  • MD5

    4f25a848fe67985cbb070afc2e8c8a7d

  • SHA1

    48654076f0ae5999b4307befa53eb35cd5583d69

  • SHA256

    8d8ef6f794f3a242e1d19a2227f86562e506a9c8779b5342f31b06d42ecd7398

  • SHA512

    eec68499fff6a22277f71d30fd5dcf822278fd13c7cb80cf0dc0588549e12b120eda161bea09b0697f4108505f4dea8a209e7c727c35effa393c90ef80d75410

  • SSDEEP

    6144:yT87rmSUmZeidcog4HCwi/4yc5CrvOt3c9liMTUzvCwwqTb6Mw/:yTQamvduLwByu8ySiMTMCTqnvQ

Score
10/10
expirobackdoordiscovery

Malware Config

Targets

    • Target

      628e8e8f4dc31191a98ce300f0f3f721ad80b184b3c02d288fbe674f92d63bb6

    • Size

      415KB

    • MD5

      df2d7668906396625694e3cebaa3f854

    • SHA1

      c9f3b26a09ba5ccfedf4376d3f6743a6c1af5de1

    • SHA256

      628e8e8f4dc31191a98ce300f0f3f721ad80b184b3c02d288fbe674f92d63bb6

    • SHA512

      e47fd4dd8d37becdd88c42e76baedbeb0531cd03d08954f3e9e46d7de5e2bd9f4744890696d1156accd009fc90e3ca296dbd0f5dea56d9bcd05b8c456dbd46ae

    • SSDEEP

      6144:eUGcJmZatH1Mmt1GwCYjqcaKX7b4x0VNn+tGfwhyhvmL:YcbHbt1GwCNcBV+8ocM

    Score
    10/10
    expirobackdoordiscovery

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks