expiro | 4eb514df2f276ac0bb8ec1a9ddb370c2490b687f6154df2b67563b494d0bb757 | Triage

Submit
Reports

Overview

overview

Static

static

3

cdd7a0a82b...18.exe

windows10-2004-x64

Sharing

General

Target

cdd7a0a82bf99422dee15cb26c30cd8f_JaffaCakes118
Size

416KB
Sample

241206-tc5nravpby
MD5

cdd7a0a82bf99422dee15cb26c30cd8f
SHA1

8bb3180b7fd4488baab15d0c8806d474557e4041
SHA256

4eb514df2f276ac0bb8ec1a9ddb370c2490b687f6154df2b67563b494d0bb757
SHA512

43b50226bd47a07427059848e47665d66d75ae015d93a22aadd4c9161ef3ebdecf6494c898aa891124c23eb1e546154a9a8fde00fde65d03ac80878b197b4af6
SSDEEP

6144:44Xtyl2yRqpc3wMgQV9MIzV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:4PxcfQV1FmwLQcUqgsPBYv745B

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cdd7a0a82bf99422dee15cb26c30cd8f_JaffaCakes118.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  cdd7a0a82bf99422dee15cb26c30cd8f_JaffaCakes118
- Size
  
  416KB
- MD5
  
  cdd7a0a82bf99422dee15cb26c30cd8f
- SHA1
  
  8bb3180b7fd4488baab15d0c8806d474557e4041
- SHA256
  
  4eb514df2f276ac0bb8ec1a9ddb370c2490b687f6154df2b67563b494d0bb757
- SHA512
  
  43b50226bd47a07427059848e47665d66d75ae015d93a22aadd4c9161ef3ebdecf6494c898aa891124c23eb1e546154a9a8fde00fde65d03ac80878b197b4af6
- SSDEEP
  
  6144:44Xtyl2yRqpc3wMgQV9MIzV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:4PxcfQV1FmwLQcUqgsPBYv745B
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy