Overview

overview

10

Static

static

3

0895222b71...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0895222b71799d6c35f93c56686aee93_JaffaCakes118

  • Size

    416KB

  • Sample

    241002-dnlf9axgqe

  • MD5

    0895222b71799d6c35f93c56686aee93

  • SHA1

    bbdf529bc428d61ff1e925b2ab8ec518263a7441

  • SHA256

    f1508a51636654b429f6783760da8b02a3b22473f7470c9f7bbed6225ef6eeac

  • SHA512

    8dd6d2bfe6a7ebb01bf0ca7f332bae53ac1df102e8a37ce662820cc32015448cef9d4831f3a87e301c0fe6b7280616228b1b3a57b2164e78b01b729cfca74d53

  • SSDEEP

    6144:omCF0vvjGapGjPneJg+zYF/ToAkA5Gj8mUkgRAtBnwk3vUTfdNCG9hgtN0:pjGahg+sjkAs8mzJB93sBNCG9n

Score
10/10
expirobackdoor

Malware Config

Targets

    • Target

      0895222b71799d6c35f93c56686aee93_JaffaCakes118

    • Size

      416KB

    • MD5

      0895222b71799d6c35f93c56686aee93

    • SHA1

      bbdf529bc428d61ff1e925b2ab8ec518263a7441

    • SHA256

      f1508a51636654b429f6783760da8b02a3b22473f7470c9f7bbed6225ef6eeac

    • SHA512

      8dd6d2bfe6a7ebb01bf0ca7f332bae53ac1df102e8a37ce662820cc32015448cef9d4831f3a87e301c0fe6b7280616228b1b3a57b2164e78b01b729cfca74d53

    • SSDEEP

      6144:omCF0vvjGapGjPneJg+zYF/ToAkA5Gj8mUkgRAtBnwk3vUTfdNCG9hgtN0:pjGahg+sjkAs8mzJB93sBNCG9n

    Score
    10/10
    expirobackdoor

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1

MITRE ATT&CK Matrix

Tasks