expiro | 885e78af467191544d493d57e303807bf338f5ef517bebf295350edaa92d1fe7 | Triage

Submit
Reports

Overview

overview

Static

static

3

885e78af46...e7.exe

windows7-x64

885e78af46...e7.exe

windows10-2004-x64

Sharing

General

Target

885e78af467191544d493d57e303807bf338f5ef517bebf295350edaa92d1fe7.exe
Size

628KB
Sample

241204-j55t4syqcv
MD5

ca1c5f5700c0881c9cc03943eccdb36b
SHA1

f9a7bcdef7a9c2a1f94bdb1db4f39129a52d1239
SHA256

885e78af467191544d493d57e303807bf338f5ef517bebf295350edaa92d1fe7
SHA512

80b7c4b96f0a998099f692fddf4f74fc88901a6aef90ceb8dc7691a018756040f5a08fafc881a0f3c8a8bc2252bb8367b8727e0f7b98580db2cda99e715a93fe
SSDEEP

12288:Fqs7UXlyluyp8Ocb49YYvMxPiM7LgKhRQ74Q9qYK/U:Fqs0lpyq1ZYXMROeYl

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

885e78af467191544d493d57e303807bf338f5ef517bebf295350edaa92d1fe7.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

885e78af467191544d493d57e303807bf338f5ef517bebf295350edaa92d1fe7.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  885e78af467191544d493d57e303807bf338f5ef517bebf295350edaa92d1fe7.exe
- Size
  
  628KB
- MD5
  
  ca1c5f5700c0881c9cc03943eccdb36b
- SHA1
  
  f9a7bcdef7a9c2a1f94bdb1db4f39129a52d1239
- SHA256
  
  885e78af467191544d493d57e303807bf338f5ef517bebf295350edaa92d1fe7
- SHA512
  
  80b7c4b96f0a998099f692fddf4f74fc88901a6aef90ceb8dc7691a018756040f5a08fafc881a0f3c8a8bc2252bb8367b8727e0f7b98580db2cda99e715a93fe
- SSDEEP
  
  12288:Fqs7UXlyluyp8Ocb49YYvMxPiM7LgKhRQ74Q9qYK/U:Fqs0lpyq1ZYXMROeYl
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy