expiro | 0112f89f5ee209d25a565b600bb2189593927ed1f5db0fcadd184f5b396f0a30 | Triage

Submit
Reports

Overview

overview

Static

static

3

0112f89f5e...30.exe

windows7-x64

0112f89f5e...30.exe

windows10-2004-x64

Sharing

General

Target

0112f89f5ee209d25a565b600bb2189593927ed1f5db0fcadd184f5b396f0a30.exe
Size

634KB
Sample

241219-l2mv8szlaw
MD5

b075d91a77d738ff75d9103499fd6307
SHA1

fe367a9ab479b2b5748fa1269cce6b45bebe32d8
SHA256

0112f89f5ee209d25a565b600bb2189593927ed1f5db0fcadd184f5b396f0a30
SHA512

93c48cc365229e7dd5ee5863cb249875ff87c115202689d3f9edad935f3aab61c5474de8efde6ea46200325c364e896b61910b8251a8610de94e5a463e74fd9f
SSDEEP

12288:DTs9wyMzoSkrf+Djy1ZRD2wDp/XAtc9BAErNZsQRJ+W2/8tm:G4Vkrf+Djy1ZRCEIETzRJ+W2/j

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0112f89f5ee209d25a565b600bb2189593927ed1f5db0fcadd184f5b396f0a30.exe

Resource

win7-20241010-en

expiro backdoor discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

0112f89f5ee209d25a565b600bb2189593927ed1f5db0fcadd184f5b396f0a30.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  0112f89f5ee209d25a565b600bb2189593927ed1f5db0fcadd184f5b396f0a30.exe
- Size
  
  634KB
- MD5
  
  b075d91a77d738ff75d9103499fd6307
- SHA1
  
  fe367a9ab479b2b5748fa1269cce6b45bebe32d8
- SHA256
  
  0112f89f5ee209d25a565b600bb2189593927ed1f5db0fcadd184f5b396f0a30
- SHA512
  
  93c48cc365229e7dd5ee5863cb249875ff87c115202689d3f9edad935f3aab61c5474de8efde6ea46200325c364e896b61910b8251a8610de94e5a463e74fd9f
- SSDEEP
  
  12288:DTs9wyMzoSkrf+Djy1ZRD2wDp/XAtc9BAErNZsQRJ+W2/8tm:G4Vkrf+Djy1ZRCEIETzRJ+W2/j
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy