expiro | a1d2734202a324642c8bacaaffdaa171105fdabab53d8644f8fe34f959805bfe | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...52.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_0979732f1a76307ac08b6bba37c86152
Size

432KB
Sample

241231-hmh2yssrfs
MD5

0979732f1a76307ac08b6bba37c86152
SHA1

9b5e37b5377ce4b6cba00d16af7699386ed68984
SHA256

a1d2734202a324642c8bacaaffdaa171105fdabab53d8644f8fe34f959805bfe
SHA512

a4aa81ed0b3797ed94ffd3982f9990ae8b374d47799e1fabfed08a2d75c31c421f4da4cc7a310287fa6cc3a1a5dee1a686173b7e103bae202573191e76165786
SSDEEP

6144:eFUCmZqoFWC6xETjOkdRtXD4NaP6uU6X+vvJppccKhcJe/7qH00gfiRJrsiF2k:uUCmZiCZTPRHeDWcLo7qHY8JgO2

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_0979732f1a76307ac08b6bba37c86152.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_0979732f1a76307ac08b6bba37c86152
- Size
  
  432KB
- MD5
  
  0979732f1a76307ac08b6bba37c86152
- SHA1
  
  9b5e37b5377ce4b6cba00d16af7699386ed68984
- SHA256
  
  a1d2734202a324642c8bacaaffdaa171105fdabab53d8644f8fe34f959805bfe
- SHA512
  
  a4aa81ed0b3797ed94ffd3982f9990ae8b374d47799e1fabfed08a2d75c31c421f4da4cc7a310287fa6cc3a1a5dee1a686173b7e103bae202573191e76165786
- SSDEEP
  
  6144:eFUCmZqoFWC6xETjOkdRtXD4NaP6uU6X+vvJppccKhcJe/7qH00gfiRJrsiF2k:uUCmZiCZTPRHeDWcLo7qHY8JgO2
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy