expiro | a8da0a9629dd92ea075fba2588454701cd3415b98ef4ae7395402de190023dfe | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...32.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_6c69075444416ff5f0d289f5e0682332
Size

432KB
Sample

250103-nyw1vavlbp
MD5

6c69075444416ff5f0d289f5e0682332
SHA1

1f48d7f759cd1ddc6b2c70b9ed726d994142f282
SHA256

a8da0a9629dd92ea075fba2588454701cd3415b98ef4ae7395402de190023dfe
SHA512

0b3d5048fedfba9f1a1c95979ce0a49f7ada693c5b10b2c142a198508d7c5f0cc1a67b6f85ee490d9319456549a8f5e113c57ebb675a8d1725873abc2f8b94e2
SSDEEP

12288:hUCmZiC8AFTn00RLpir2mJkAs8mzJB93sBNCG9n:bCjTwr2kk/Ujn

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_6c69075444416ff5f0d289f5e0682332.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_6c69075444416ff5f0d289f5e0682332
- Size
  
  432KB
- MD5
  
  6c69075444416ff5f0d289f5e0682332
- SHA1
  
  1f48d7f759cd1ddc6b2c70b9ed726d994142f282
- SHA256
  
  a8da0a9629dd92ea075fba2588454701cd3415b98ef4ae7395402de190023dfe
- SHA512
  
  0b3d5048fedfba9f1a1c95979ce0a49f7ada693c5b10b2c142a198508d7c5f0cc1a67b6f85ee490d9319456549a8f5e113c57ebb675a8d1725873abc2f8b94e2
- SSDEEP
  
  12288:hUCmZiC8AFTn00RLpir2mJkAs8mzJB93sBNCG9n:bCjTwr2kk/Ujn
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy