expiro | 21e3c976a72b6f25b7c90ad8350661e86adac58dc01d15ceed985e9c9f118063 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...b4.exe

windows7-x64

JaffaCakes...b4.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_0d165a05ca7ff896eabcd032ada365b4
Size

417KB
Sample

241231-j2nres1ngx
MD5

0d165a05ca7ff896eabcd032ada365b4
SHA1

22ada9a59d7a987a980e2e667266ddd405e29298
SHA256

21e3c976a72b6f25b7c90ad8350661e86adac58dc01d15ceed985e9c9f118063
SHA512

5cc651ec9784fcb0d1cc49e4ced91d6050e55b20434470da1665e65bc081074ace462bb457d658217f616b9e18c3c50a12cb3b04dfd91559adc1a6e88e0c09a7
SSDEEP

6144:TSpwTEOzPSK5U2SoJ8VWackcV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:u+IK5U2SoysHmwLQcUqgsPBYv745B

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_0d165a05ca7ff896eabcd032ada365b4.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_0d165a05ca7ff896eabcd032ada365b4.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_0d165a05ca7ff896eabcd032ada365b4
- Size
  
  417KB
- MD5
  
  0d165a05ca7ff896eabcd032ada365b4
- SHA1
  
  22ada9a59d7a987a980e2e667266ddd405e29298
- SHA256
  
  21e3c976a72b6f25b7c90ad8350661e86adac58dc01d15ceed985e9c9f118063
- SHA512
  
  5cc651ec9784fcb0d1cc49e4ced91d6050e55b20434470da1665e65bc081074ace462bb457d658217f616b9e18c3c50a12cb3b04dfd91559adc1a6e88e0c09a7
- SSDEEP
  
  6144:TSpwTEOzPSK5U2SoJ8VWackcV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:u+IK5U2SoysHmwLQcUqgsPBYv745B
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy