expiro | 736c376782c1235a85c487abfbd2813b530cae2b2ea02b89a5a6aa4d89a5a190 | Triage

Submit
Reports

Overview

overview

Static

static

3

fc69cc1229...18.exe

windows7-x64

fc69cc1229...18.exe

windows10-2004-x64

Sharing

General

Target

fc69cc12293f80d316741ccab06faa67_JaffaCakes118
Size

437KB
Sample

241218-vpmt5swrgj
MD5

fc69cc12293f80d316741ccab06faa67
SHA1

890c2cd13e381a6ae429e69748c95495c0cb656d
SHA256

736c376782c1235a85c487abfbd2813b530cae2b2ea02b89a5a6aa4d89a5a190
SHA512

fa6c332b838a3102ad418bb306198d2cbae47ba347526fd50dbe059206c9e7568604f3762d4c3cebb00e8f08962e4cf038797fa6d9cbadda6953fb5f18edfe15
SSDEEP

6144:Uytwm2NOzPSK5U2SoJ8VWackMV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:2rLK5U2SoysXmwLQcUqgsPBYv745B

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fc69cc12293f80d316741ccab06faa67_JaffaCakes118.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

fc69cc12293f80d316741ccab06faa67_JaffaCakes118.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  fc69cc12293f80d316741ccab06faa67_JaffaCakes118
- Size
  
  437KB
- MD5
  
  fc69cc12293f80d316741ccab06faa67
- SHA1
  
  890c2cd13e381a6ae429e69748c95495c0cb656d
- SHA256
  
  736c376782c1235a85c487abfbd2813b530cae2b2ea02b89a5a6aa4d89a5a190
- SHA512
  
  fa6c332b838a3102ad418bb306198d2cbae47ba347526fd50dbe059206c9e7568604f3762d4c3cebb00e8f08962e4cf038797fa6d9cbadda6953fb5f18edfe15
- SSDEEP
  
  6144:Uytwm2NOzPSK5U2SoJ8VWackMV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:2rLK5U2SoysXmwLQcUqgsPBYv745B
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy