expiro | 80db4ab7881d5aaa71c956c02b9ae2a8a521122417ddf75b2a49a31039f494f1 | Triage

Submit
Reports

Overview

overview

Static

static

3

baa728795e...18.exe

windows7-x64

baa728795e...18.exe

windows10-2004-x64

Sharing

General

Target

baa728795e07aa87ffee982fb7527443_JaffaCakes118
Size

417KB
Sample

241202-29t8aaxqhw
MD5

baa728795e07aa87ffee982fb7527443
SHA1

9e81c372c496c63bbf5af515a26700d690dbef37
SHA256

80db4ab7881d5aaa71c956c02b9ae2a8a521122417ddf75b2a49a31039f494f1
SHA512

08f843eb5897b310fec3fd5983a193cb96fc9c2de4cd945763b6ab5ecf23a5236e283abbbaa94999f29723c503fc750e08be1ad9c8ec6e873cb069c960dbf2cd
SSDEEP

6144:9SpwTEOzPSK5U2SoJ8VWacknV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:c+IK5U2SoysMmwLQcUqgsPBYv745B

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

baa728795e07aa87ffee982fb7527443_JaffaCakes118.exe

Resource

win7-20240729-en

expiro backdoor discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

baa728795e07aa87ffee982fb7527443_JaffaCakes118.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  baa728795e07aa87ffee982fb7527443_JaffaCakes118
- Size
  
  417KB
- MD5
  
  baa728795e07aa87ffee982fb7527443
- SHA1
  
  9e81c372c496c63bbf5af515a26700d690dbef37
- SHA256
  
  80db4ab7881d5aaa71c956c02b9ae2a8a521122417ddf75b2a49a31039f494f1
- SHA512
  
  08f843eb5897b310fec3fd5983a193cb96fc9c2de4cd945763b6ab5ecf23a5236e283abbbaa94999f29723c503fc750e08be1ad9c8ec6e873cb069c960dbf2cd
- SSDEEP
  
  6144:9SpwTEOzPSK5U2SoJ8VWacknV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:c+IK5U2SoysMmwLQcUqgsPBYv745B
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2024

Terms | Privacy