expiro | ea4485dda959d46aac8581976b61025938427e415d3a6722a9f28e87a65cfe08 | Triage

Sharing

General

Target

ea4485dda959d46aac8581976b61025938427e415d3a6722a9f28e87a65cfe08.exe
Size

702KB
Sample

241205-wymq6ssmcq
MD5

03d6249100042a2e5129a566e1e3d874
SHA1

9630a75148e21c16d345f6a71162177eb9501a23
SHA256

ea4485dda959d46aac8581976b61025938427e415d3a6722a9f28e87a65cfe08
SHA512

439666b42ffcc2ffe9493a953c7ec08c87d7444d491a6880210d12018f17d9ef328b6748ea98d881d42cbdd923731270875bbfe797de00e110f7508b684c6f40
SSDEEP

12288:nHbG6uElreqLCuW9MZjglJiNyaIf12rNBeiLB/+7KxMPIcZjIzEARRmZN4hgp64e:nHxpret9yC92uiLB/+uxMPIcZCmZ2E6N

Score

10^/10

expiro backdoor discovery

Malware Config

Targets

- Target
  
  ea4485dda959d46aac8581976b61025938427e415d3a6722a9f28e87a65cfe08.exe
- Size
  
  702KB
- MD5
  
  03d6249100042a2e5129a566e1e3d874
- SHA1
  
  9630a75148e21c16d345f6a71162177eb9501a23
- SHA256
  
  ea4485dda959d46aac8581976b61025938427e415d3a6722a9f28e87a65cfe08
- SHA512
  
  439666b42ffcc2ffe9493a953c7ec08c87d7444d491a6880210d12018f17d9ef328b6748ea98d881d42cbdd923731270875bbfe797de00e110f7508b684c6f40
- SSDEEP
  
  12288:nHbG6uElreqLCuW9MZjglJiNyaIf12rNBeiLB/+7KxMPIcZjIzEARRmZN4hgp64e:nHxpret9yC92uiLB/+uxMPIcZCmZ2E6N
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery