expiro | 5832976cdca88339647c621464fad0dc022f6c22b040b075688d42b80b44ec11 | Triage

Submit
Reports

Overview

overview

Static

static

3

ce33137ebb...18.exe

windows10-2004-x64

Sharing

General

Target

ce33137ebb02545b6366aba223aeb361_JaffaCakes118
Size

432KB
Sample

241206-v3qsysynds
MD5

ce33137ebb02545b6366aba223aeb361
SHA1

15773e716e078ebbb3d7821bdd31c882ca7ece04
SHA256

5832976cdca88339647c621464fad0dc022f6c22b040b075688d42b80b44ec11
SHA512

cf28be2dd7f1db87bb4eb61e2d9194a7ff48ac1617694418966ba09c8bf88110b2312fa731fea87d7ad117b0c55fb30464af3e0a6786bfc825ebd444ea138d89
SSDEEP

6144:MFUCmZqoFWC6xY9uWR4/u5pUhx+6lVkDy2VQndSrO+SIlp7/WNX7x2EwcY8UiIe:gUCmZiCl9uW5KeHVO0qIlp7+x9xhIS2

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ce33137ebb02545b6366aba223aeb361_JaffaCakes118.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  ce33137ebb02545b6366aba223aeb361_JaffaCakes118
- Size
  
  432KB
- MD5
  
  ce33137ebb02545b6366aba223aeb361
- SHA1
  
  15773e716e078ebbb3d7821bdd31c882ca7ece04
- SHA256
  
  5832976cdca88339647c621464fad0dc022f6c22b040b075688d42b80b44ec11
- SHA512
  
  cf28be2dd7f1db87bb4eb61e2d9194a7ff48ac1617694418966ba09c8bf88110b2312fa731fea87d7ad117b0c55fb30464af3e0a6786bfc825ebd444ea138d89
- SSDEEP
  
  6144:MFUCmZqoFWC6xY9uWR4/u5pUhx+6lVkDy2VQndSrO+SIlp7/WNX7x2EwcY8UiIe:gUCmZiCl9uW5KeHVO0qIlp7+x9xhIS2
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy