expiro | f3be287fb9bc82066dfd43947a12b5d7ec64807494e3975e3ee4e079f2206cab | Triage

Submit
Reports

Overview

overview

Static

static

3

f7c0b56ff7...18.exe

windows7-x64

f7c0b56ff7...18.exe

windows10-2004-x64

Sharing

General

Target

f7c0b56ff79a7baa9ca1983fcd2ea493_JaffaCakes118
Size

415KB
Sample

241216-hbv75szmbj
MD5

f7c0b56ff79a7baa9ca1983fcd2ea493
SHA1

4da790cffa5f95517a0743f6bf3385622045f406
SHA256

f3be287fb9bc82066dfd43947a12b5d7ec64807494e3975e3ee4e079f2206cab
SHA512

0eabe070935399ece292c9f6e3fece93541f845179dfd71d18d61367e31c2dc8a80cb0854c68100634a7632f99135277db923acc57216503f7a4bd1870766b89
SSDEEP

6144:Rhhe1/FVNES2co+QSNWpve/eIoLZOtqJSFlYmd5zSKPjf2fzlFeKSW:c1FeltSNWtA0Et5UGDPOS

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f7c0b56ff79a7baa9ca1983fcd2ea493_JaffaCakes118.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

f7c0b56ff79a7baa9ca1983fcd2ea493_JaffaCakes118.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  f7c0b56ff79a7baa9ca1983fcd2ea493_JaffaCakes118
- Size
  
  415KB
- MD5
  
  f7c0b56ff79a7baa9ca1983fcd2ea493
- SHA1
  
  4da790cffa5f95517a0743f6bf3385622045f406
- SHA256
  
  f3be287fb9bc82066dfd43947a12b5d7ec64807494e3975e3ee4e079f2206cab
- SHA512
  
  0eabe070935399ece292c9f6e3fece93541f845179dfd71d18d61367e31c2dc8a80cb0854c68100634a7632f99135277db923acc57216503f7a4bd1870766b89
- SSDEEP
  
  6144:Rhhe1/FVNES2co+QSNWpve/eIoLZOtqJSFlYmd5zSKPjf2fzlFeKSW:c1FeltSNWtA0Et5UGDPOS
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy