expiro | 0a5a352b75267fdeb20b4f2223557b3e350bcd683e03ddb18c44ec1ebb409c0b | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...35.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_5aef0014c97e12b72a489d5939621735
Size

432KB
Sample

250101-s71gvatmal
MD5

5aef0014c97e12b72a489d5939621735
SHA1

3946dc3a971491df6adfc36193c1cb01ecf9e37d
SHA256

0a5a352b75267fdeb20b4f2223557b3e350bcd683e03ddb18c44ec1ebb409c0b
SHA512

0658e61111642329f54b1c8491464a24f12ea39fff335da9bdfb3f270fef4dc2719b2e6617f0b550f7120be200b9cb40fc351ad573605b58c2542b77fc0825c3
SSDEEP

12288:lUCmZiCr6E7ur7/oEkwzTKVsWqThyUnXyvVDYIiUnpgC:HCWEaVkw/CsWqThDnXmsUnpgC

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_5aef0014c97e12b72a489d5939621735.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_5aef0014c97e12b72a489d5939621735
- Size
  
  432KB
- MD5
  
  5aef0014c97e12b72a489d5939621735
- SHA1
  
  3946dc3a971491df6adfc36193c1cb01ecf9e37d
- SHA256
  
  0a5a352b75267fdeb20b4f2223557b3e350bcd683e03ddb18c44ec1ebb409c0b
- SHA512
  
  0658e61111642329f54b1c8491464a24f12ea39fff335da9bdfb3f270fef4dc2719b2e6617f0b550f7120be200b9cb40fc351ad573605b58c2542b77fc0825c3
- SSDEEP
  
  12288:lUCmZiCr6E7ur7/oEkwzTKVsWqThyUnXyvVDYIiUnpgC:HCWEaVkw/CsWqThDnXmsUnpgC
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy