expiro | d1fe8d89c090f06b379078b01c56b0584f9a44b80226d7565abfc969dd8a1101 | Triage

Submit
Reports

Overview

overview

Static

static

3

d1fe8d89c0...01.exe

windows7-x64

d1fe8d89c0...01.exe

windows10-2004-x64

Sharing

General

Target

d1fe8d89c090f06b379078b01c56b0584f9a44b80226d7565abfc969dd8a1101
Size

599KB
Sample

241201-g687tayjdz
MD5

7480cd14d124255798c5bf6720aa7124
SHA1

0b577fd2b5e2de5a4d4277992657c5a15bbe2766
SHA256

d1fe8d89c090f06b379078b01c56b0584f9a44b80226d7565abfc969dd8a1101
SHA512

5e797f0baa0b8a0b14828ea21ee68990d5ef5b74e8e184df0b7da314b3c68311221e847f27d5fb6467b259922f3374fe6ce058332b9e7b81d535361f599d1ec0
SSDEEP

12288:U7gKNkhm/JuyXnPB+R8WHzmV9crGlQBdy8xVEUbQuLy8outPDKHuAnRS:U7zNkhm5PBnkAOd/xVhB+8oQ+HI

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d1fe8d89c090f06b379078b01c56b0584f9a44b80226d7565abfc969dd8a1101.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

d1fe8d89c090f06b379078b01c56b0584f9a44b80226d7565abfc969dd8a1101.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  d1fe8d89c090f06b379078b01c56b0584f9a44b80226d7565abfc969dd8a1101
- Size
  
  599KB
- MD5
  
  7480cd14d124255798c5bf6720aa7124
- SHA1
  
  0b577fd2b5e2de5a4d4277992657c5a15bbe2766
- SHA256
  
  d1fe8d89c090f06b379078b01c56b0584f9a44b80226d7565abfc969dd8a1101
- SHA512
  
  5e797f0baa0b8a0b14828ea21ee68990d5ef5b74e8e184df0b7da314b3c68311221e847f27d5fb6467b259922f3374fe6ce058332b9e7b81d535361f599d1ec0
- SSDEEP
  
  12288:U7gKNkhm/JuyXnPB+R8WHzmV9crGlQBdy8xVEUbQuLy8outPDKHuAnRS:U7zNkhm5PBnkAOd/xVhB+8oQ+HI
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2024

Terms | Privacy