expiro | fad1e57c0a421c4ff37080596dd54278baedd21d6f6ec292a8d97916abd54a50 | Triage

Submit
Reports

Overview

overview

Static

static

3

fad1e57c0a...0N.exe

windows7-x64

fad1e57c0a...0N.exe

windows10-2004-x64

Sharing

General

Target

fad1e57c0a421c4ff37080596dd54278baedd21d6f6ec292a8d97916abd54a50N.exe
Size

643KB
Sample

241201-erbxna1lcm
MD5

cb03f768f082eec3f3d7851cad348c70
SHA1

3bd6687dda4ed04b92f1b5b34d35f813108d4ff1
SHA256

fad1e57c0a421c4ff37080596dd54278baedd21d6f6ec292a8d97916abd54a50
SHA512

4862d8828a44f352bed2f3e371dafddf9708ad2502a6102160df07f97724e86d8c60718f00dc7a7ad2b625678088480caece329d099e4df9f030114d03871a78
SSDEEP

12288:rMU7R8B7rSMrgDE6eA6mGvt/GR73ke2MfTj26/twS0m1x58kM6:rJ7R8B7rSMryEXzFOJUe2Mfv23gM

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fad1e57c0a421c4ff37080596dd54278baedd21d6f6ec292a8d97916abd54a50N.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

120 seconds

Behavioral task

behavioral2

Sample

fad1e57c0a421c4ff37080596dd54278baedd21d6f6ec292a8d97916abd54a50N.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

120 seconds

Malware Config

Targets

- Target
  
  fad1e57c0a421c4ff37080596dd54278baedd21d6f6ec292a8d97916abd54a50N.exe
- Size
  
  643KB
- MD5
  
  cb03f768f082eec3f3d7851cad348c70
- SHA1
  
  3bd6687dda4ed04b92f1b5b34d35f813108d4ff1
- SHA256
  
  fad1e57c0a421c4ff37080596dd54278baedd21d6f6ec292a8d97916abd54a50
- SHA512
  
  4862d8828a44f352bed2f3e371dafddf9708ad2502a6102160df07f97724e86d8c60718f00dc7a7ad2b625678088480caece329d099e4df9f030114d03871a78
- SSDEEP
  
  12288:rMU7R8B7rSMrgDE6eA6mGvt/GR73ke2MfTj26/twS0m1x58kM6:rJ7R8B7rSMryEXzFOJUe2Mfv23gM
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2024

Terms | Privacy