expiro | 348c9c6415776e4747212e28064950a147fb4ca38f397b2936027a6847861b17 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...77.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_45bf7d2e1d23ac93ff391040777f8277
Size

816KB
Sample

250101-d51bqstkay
MD5

45bf7d2e1d23ac93ff391040777f8277
SHA1

7835c0da43136b806a8c14347de22d50462082a5
SHA256

348c9c6415776e4747212e28064950a147fb4ca38f397b2936027a6847861b17
SHA512

f3d943034544d1b1f3ee94edbce7d7db2c1e2c3f9f3b74c6e2ab9369daa57bf1b2dc86748a76f57e953f9bbcbdeb98c82fd13617e269853da38863f9e721da2b
SSDEEP

24576:FJW2KjJ4Td3kJnbsPhnzq6FpMuFc1xj4AUqSf:FInJ4Td3mbsPhne6FpPUf

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_45bf7d2e1d23ac93ff391040777f8277.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_45bf7d2e1d23ac93ff391040777f8277
- Size
  
  816KB
- MD5
  
  45bf7d2e1d23ac93ff391040777f8277
- SHA1
  
  7835c0da43136b806a8c14347de22d50462082a5
- SHA256
  
  348c9c6415776e4747212e28064950a147fb4ca38f397b2936027a6847861b17
- SHA512
  
  f3d943034544d1b1f3ee94edbce7d7db2c1e2c3f9f3b74c6e2ab9369daa57bf1b2dc86748a76f57e953f9bbcbdeb98c82fd13617e269853da38863f9e721da2b
- SSDEEP
  
  24576:FJW2KjJ4Td3kJnbsPhnzq6FpMuFc1xj4AUqSf:FInJ4Td3mbsPhne6FpPUf
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

© 2018-2025

Terms | Privacy