expiro | 6fe7e11bba8b8868a4130ae1e6afd296ac7bace3de03d20ce9d470d6cd906f83 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...9a.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_9c388b450d20f0b42c5ed2029a01899a
Size

432KB
Sample

250105-l1gmtssqan
MD5

9c388b450d20f0b42c5ed2029a01899a
SHA1

13606731c1c19d24f39adc96e996bd3e5bbf26dd
SHA256

6fe7e11bba8b8868a4130ae1e6afd296ac7bace3de03d20ce9d470d6cd906f83
SHA512

fe0b1029f10bc4088ccf912eee65c88ba5e6d62bf75a2f29aec3f291c34989d91eeb71db16e757e11da66ac707ccee98e474bc71d6489dc05d4c14c61c401c7b
SSDEEP

6144:wFUCmZqoFWC6x6lzF6cnjKwa9qgl/A37b2fZwSYUI0ZxA9XxAgsBhSRsuR3tWJHz:cUCmZiC31FjK2rbpgZx8Xx2kRvtWJ7/

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_9c388b450d20f0b42c5ed2029a01899a.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_9c388b450d20f0b42c5ed2029a01899a
- Size
  
  432KB
- MD5
  
  9c388b450d20f0b42c5ed2029a01899a
- SHA1
  
  13606731c1c19d24f39adc96e996bd3e5bbf26dd
- SHA256
  
  6fe7e11bba8b8868a4130ae1e6afd296ac7bace3de03d20ce9d470d6cd906f83
- SHA512
  
  fe0b1029f10bc4088ccf912eee65c88ba5e6d62bf75a2f29aec3f291c34989d91eeb71db16e757e11da66ac707ccee98e474bc71d6489dc05d4c14c61c401c7b
- SSDEEP
  
  6144:wFUCmZqoFWC6x6lzF6cnjKwa9qgl/A37b2fZwSYUI0ZxA9XxAgsBhSRsuR3tWJHz:cUCmZiC31FjK2rbpgZx8Xx2kRvtWJ7/
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy