expiro | 133ea5d1a4568c688bf2cea7c1b463e9cb04c9b11134b736a113a4dd0a86ef7a | Triage

Submit
Reports

Overview

overview

Static

static

3

fdcf8cfa54...18.exe

windows10-2004-x64

Sharing

General

Target

fdcf8cfa5461201535f5085993876d32_JaffaCakes118
Size

416KB
Sample

241219-bdke4a1jen
MD5

fdcf8cfa5461201535f5085993876d32
SHA1

d171da7d3c9988b4218659621fe07001e96debc8
SHA256

133ea5d1a4568c688bf2cea7c1b463e9cb04c9b11134b736a113a4dd0a86ef7a
SHA512

6c18c2eaa28caed91940ba0f74b9a3509f42ff2f64756e73246ded3afef8e5ad3dadf0a2ed7b8a04a49305fc775905279d6fe03f1ece5c32632f2daf918cd011
SSDEEP

6144:LLMvmza8xs+r7eIZvZ3hv//7a8QhCait2lMqzp92HrLJy7NqBaiE5RS9dNfUkwN:LLMezaws+rvvOHhCaiUNDNGPE5w9gk

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fdcf8cfa5461201535f5085993876d32_JaffaCakes118.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  fdcf8cfa5461201535f5085993876d32_JaffaCakes118
- Size
  
  416KB
- MD5
  
  fdcf8cfa5461201535f5085993876d32
- SHA1
  
  d171da7d3c9988b4218659621fe07001e96debc8
- SHA256
  
  133ea5d1a4568c688bf2cea7c1b463e9cb04c9b11134b736a113a4dd0a86ef7a
- SHA512
  
  6c18c2eaa28caed91940ba0f74b9a3509f42ff2f64756e73246ded3afef8e5ad3dadf0a2ed7b8a04a49305fc775905279d6fe03f1ece5c32632f2daf918cd011
- SSDEEP
  
  6144:LLMvmza8xs+r7eIZvZ3hv//7a8QhCait2lMqzp92HrLJy7NqBaiE5RS9dNfUkwN:LLMezaws+rvvOHhCaiUNDNGPE5w9gk
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy