expiro | e20f345c316498296c6c4f7b296aa408b73b645dc9a04c50bfa9945b43044426 | Triage

Submit
Reports

Overview

overview

Static

static

3

e20f345c31...6N.exe

windows7-x64

e20f345c31...6N.exe

windows10-2004-x64

Sharing

General

Target

e20f345c316498296c6c4f7b296aa408b73b645dc9a04c50bfa9945b43044426N.exe
Size

727KB
Sample

241130-zhx4ravlcs
MD5

a05b79177fe254e7ed4000ac24cffa80
SHA1

3bd4f3d0fe4ab0df61da40f9b021e606a48873b5
SHA256

e20f345c316498296c6c4f7b296aa408b73b645dc9a04c50bfa9945b43044426
SHA512

64b3aacc98364fae6d4c6321b9b11db9c8a95dbd03ee830de8884e10905397a50ed5ccccbac59bc95827e6193467936156134535cbae3243a91ab375461a9f41
SSDEEP

12288:VxLVMsCpn5K6hIL/IzW9nbztEEX+J5EzIHS1FpK3hWs8UD:VxLYi6hFzWFyHmzImFoWs

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e20f345c316498296c6c4f7b296aa408b73b645dc9a04c50bfa9945b43044426N.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

120 seconds

Behavioral task

behavioral2

Sample

e20f345c316498296c6c4f7b296aa408b73b645dc9a04c50bfa9945b43044426N.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

120 seconds

Malware Config

Targets

- Target
  
  e20f345c316498296c6c4f7b296aa408b73b645dc9a04c50bfa9945b43044426N.exe
- Size
  
  727KB
- MD5
  
  a05b79177fe254e7ed4000ac24cffa80
- SHA1
  
  3bd4f3d0fe4ab0df61da40f9b021e606a48873b5
- SHA256
  
  e20f345c316498296c6c4f7b296aa408b73b645dc9a04c50bfa9945b43044426
- SHA512
  
  64b3aacc98364fae6d4c6321b9b11db9c8a95dbd03ee830de8884e10905397a50ed5ccccbac59bc95827e6193467936156134535cbae3243a91ab375461a9f41
- SSDEEP
  
  12288:VxLVMsCpn5K6hIL/IzW9nbztEEX+J5EzIHS1FpK3hWs8UD:VxLYi6hFzWFyHmzImFoWs
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2024

Terms | Privacy