Analysis
-
max time kernel
13s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
17-12-2024 21:49
General
-
Target
40c49fc88ec0f4d7745468557b7f9f61c4a3684fbdfbdaa866bffd5b31ec87fe.exe
-
Size
308KB
-
MD5
7b0318c797962a562c437680d710dea1
-
SHA1
3db025aab7174cbaaa2f5813a4cd787a47add913
-
SHA256
40c49fc88ec0f4d7745468557b7f9f61c4a3684fbdfbdaa866bffd5b31ec87fe
-
SHA512
8dff09dd793f221c9c284d2dec3d08e2adea3d7a323af1070ea771ce96f2cbfe67f6bf9b46050bf6f5a8c861b30c4b1289a1df0524a6d207d36d71747205e1b8
-
SSDEEP
6144:jOdT1aoOOIT9WhWgVi9uX9GmYaZ9jg7yFWmjuXppGyMNNxyXn8OglGUgt8ovcW:jOdBanxJgY9C9EyFWmjiHGjNNSMlGIW
Score
10/10
Malware Config
Signatures
-
Expiro family
-
Expiro, m0yv
Expiro aka m0yv is a multi-functional backdoor written in C++.
-
Expiro payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\40c49fc88ec0f4d7745468557b7f9f61c4a3684fbdfbdaa866bffd5b31ec87fe.exe"C:\Users\Admin\AppData\Local\Temp\40c49fc88ec0f4d7745468557b7f9f61c4a3684fbdfbdaa866bffd5b31ec87fe.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
480KB