expiro | f9e6aca558b24c4b2a16b278f47230b690d7470ecd0744def8b9a9a55f9936f7 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...14.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_96f0f4d1b7bd0c6b437b767ab163c214
Size

626KB
Sample

250105-j5t3lszqcp
MD5

96f0f4d1b7bd0c6b437b767ab163c214
SHA1

9490e88cac121f9957d25d9ddba482986165f7df
SHA256

f9e6aca558b24c4b2a16b278f47230b690d7470ecd0744def8b9a9a55f9936f7
SHA512

60b5f906aafcff26b7964bd41d9fc4d9c6b758c6d6f7da1f0b6fe7b1ee392485dc7825237736098c726bc17271bb52116b17b540f936d5efe1346090648d996b
SSDEEP

12288:GbDVP4WA10GpzCd4jNOGiirOeCUncfF2v9rjpthyr6qKGc4sBOnxX:2RwWA10GpzliirUUngFs1j3hyWWcC

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_96f0f4d1b7bd0c6b437b767ab163c214.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_96f0f4d1b7bd0c6b437b767ab163c214
- Size
  
  626KB
- MD5
  
  96f0f4d1b7bd0c6b437b767ab163c214
- SHA1
  
  9490e88cac121f9957d25d9ddba482986165f7df
- SHA256
  
  f9e6aca558b24c4b2a16b278f47230b690d7470ecd0744def8b9a9a55f9936f7
- SHA512
  
  60b5f906aafcff26b7964bd41d9fc4d9c6b758c6d6f7da1f0b6fe7b1ee392485dc7825237736098c726bc17271bb52116b17b540f936d5efe1346090648d996b
- SSDEEP
  
  12288:GbDVP4WA10GpzCd4jNOGiirOeCUncfF2v9rjpthyr6qKGc4sBOnxX:2RwWA10GpzliirUUngFs1j3hyWWcC
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

© 2018-2025

Terms | Privacy