expiro | 816be7b8bc51e5a95da04327d57a2c10b09f37cded9a40fb2bfb426cd38b0179 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...3b.exe

windows7-x64

JaffaCakes...3b.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_7abb14806e5a0587d908509f72c3173b
Size

549KB
Sample

250104-t8px6szmdj
MD5

7abb14806e5a0587d908509f72c3173b
SHA1

01e032c4f802b441ad323800ddd325a093f2a3ed
SHA256

816be7b8bc51e5a95da04327d57a2c10b09f37cded9a40fb2bfb426cd38b0179
SHA512

89275f2902dd50bf98e36a4250b4228f23dcb72046d8f35787222f0fb30dc4c32ec4d92e26b57997e3828f4cbffcbbd5b61e63ed62012516d0620448da0b69d2
SSDEEP

12288:YB3HkCn97oK5hBiAIhJmTml4OODi+pcVtVtxn:23HkC90ABlI+mCOOz6Lxn

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_7abb14806e5a0587d908509f72c3173b.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_7abb14806e5a0587d908509f72c3173b.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_7abb14806e5a0587d908509f72c3173b
- Size
  
  549KB
- MD5
  
  7abb14806e5a0587d908509f72c3173b
- SHA1
  
  01e032c4f802b441ad323800ddd325a093f2a3ed
- SHA256
  
  816be7b8bc51e5a95da04327d57a2c10b09f37cded9a40fb2bfb426cd38b0179
- SHA512
  
  89275f2902dd50bf98e36a4250b4228f23dcb72046d8f35787222f0fb30dc4c32ec4d92e26b57997e3828f4cbffcbbd5b61e63ed62012516d0620448da0b69d2
- SSDEEP
  
  12288:YB3HkCn97oK5hBiAIhJmTml4OODi+pcVtVtxn:23HkC90ABlI+mCOOz6Lxn
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy