expiro | cfaa19c9ea81f815135ae2a13cc18bd056e08ae921e72010b7373abd3028af19 | Triage

Submit
Reports

Overview

overview

Static

static

3

f968bff725...18.exe

windows10-2004-x64

Sharing

General

Target

f968bff725b1386f1496d0a1b2df9a56_JaffaCakes118
Size

432KB
Sample

241218-as4xlswlbn
MD5

f968bff725b1386f1496d0a1b2df9a56
SHA1

8f9ca24679c95bc840265c560faf2fa8791871a0
SHA256

cfaa19c9ea81f815135ae2a13cc18bd056e08ae921e72010b7373abd3028af19
SHA512

7e9962ee66a48b0ef195db67d23f1c895a6f38573ef02c0ba447762648e24d09e08940ce1ad193ec6000c1e0a0e1168740204f79b9443e6be1e21b1cc2392a47
SSDEEP

12288:AUCmZiCf/AoAC+THEkHeSiqLSarxtyZl:mCf/d32kk5iqGHZ

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f968bff725b1386f1496d0a1b2df9a56_JaffaCakes118.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  f968bff725b1386f1496d0a1b2df9a56_JaffaCakes118
- Size
  
  432KB
- MD5
  
  f968bff725b1386f1496d0a1b2df9a56
- SHA1
  
  8f9ca24679c95bc840265c560faf2fa8791871a0
- SHA256
  
  cfaa19c9ea81f815135ae2a13cc18bd056e08ae921e72010b7373abd3028af19
- SHA512
  
  7e9962ee66a48b0ef195db67d23f1c895a6f38573ef02c0ba447762648e24d09e08940ce1ad193ec6000c1e0a0e1168740204f79b9443e6be1e21b1cc2392a47
- SSDEEP
  
  12288:AUCmZiCf/AoAC+THEkHeSiqLSarxtyZl:mCf/d32kk5iqGHZ
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy