Overview

overview

10

Static

static

3

d308f5359b...18.exe

windows7-x64

10

d308f5359b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    d308f5359b93fefdfb3125eade9040bf_JaffaCakes118
  • Size 678KB
  • Sample240907-28hsvstbjd
  • SHA256 1f2e80b2b5d1ac5f899813e7917e6354e76cd4237674fc3b5a2bc27c920b9deb
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
expirobackdoordiscovery

Malware Config

Targets

    • Target
      d308f5359b93fefdfb3125eade9040bf_JaffaCakes118
    • Size 678KB
    • SHA256 1f2e80b2b5d1ac5f899813e7917e6354e76cd4237674fc3b5a2bc27c920b9deb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    expirobackdoordiscovery

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks