Overview

overview

10

Static

static

3

37aae6fb21...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    37aae6fb21c0049b7b125ec7b8c9684d_JaffaCakes118

  • Size

    432KB

  • Sample

    241012-a9wbssxhnk

  • MD5

    37aae6fb21c0049b7b125ec7b8c9684d

  • SHA1

    a0b5e15b9b0b3a80476444c80b8b447d933f563d

  • SHA256

    9e123eceaf4d9856d1272d0f0287ffe62d977f88c84260225edea4c836aafa35

  • SHA512

    84e8e84f9b518a96c5aeae741b296789991b63fe5d60f48d964a143d20071aa1ebfe701eb96a32516b3b71b20081b4d51c791e326ee7d90fbf7ebc2d61b5a6d8

  • SSDEEP

    12288:IUCmZiCaJWbPADPK7WlpHgslVblDzlcUux8crCcJ:+CaJWbOvAeVBDVw

Score
10/10
expirobackdoor

Malware Config

Targets

    • Target

      37aae6fb21c0049b7b125ec7b8c9684d_JaffaCakes118

    • Size

      432KB

    • MD5

      37aae6fb21c0049b7b125ec7b8c9684d

    • SHA1

      a0b5e15b9b0b3a80476444c80b8b447d933f563d

    • SHA256

      9e123eceaf4d9856d1272d0f0287ffe62d977f88c84260225edea4c836aafa35

    • SHA512

      84e8e84f9b518a96c5aeae741b296789991b63fe5d60f48d964a143d20071aa1ebfe701eb96a32516b3b71b20081b4d51c791e326ee7d90fbf7ebc2d61b5a6d8

    • SSDEEP

      12288:IUCmZiCaJWbPADPK7WlpHgslVblDzlcUux8crCcJ:+CaJWbOvAeVBDVw

    Score
    10/10
    expirobackdoor

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor
    behavioral1

MITRE ATT&CK Matrix

Tasks