expiro | b1cbe50c00ba8c397d2eabe9d0c2ebc9fc175455f9a6c9ea0b481f79ff7cab8f | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...f7.exe

windows7-x64

JaffaCakes...f7.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_9eab5d6f597d5f8492f737140b536bf7
Size

437KB
Sample

250105-mt9wga1rgy
MD5

9eab5d6f597d5f8492f737140b536bf7
SHA1

dc32cbccab029046c27f4a43be802b9f37fe932e
SHA256

b1cbe50c00ba8c397d2eabe9d0c2ebc9fc175455f9a6c9ea0b481f79ff7cab8f
SHA512

7cee1ce8079f40c1804d3b553b4859b8ab1c6f700b4f637cd72c6702aaa19fe5e64b71f1048faa6a1246892cef482dc46bd6fef0b4b76433b75c31c33a7116d2
SSDEEP

6144:UJVwm2i+mKaN68U8Wdvym8fXZkP/L07IkX/c6MVO4zXUdn1NwBLDmFBF3UN:rri+m/A4Wx3UG/LzARMVO4sNyDm3F3U

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_9eab5d6f597d5f8492f737140b536bf7.exe

Resource

win7-20240708-en

expiro backdoor discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_9eab5d6f597d5f8492f737140b536bf7.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_9eab5d6f597d5f8492f737140b536bf7
- Size
  
  437KB
- MD5
  
  9eab5d6f597d5f8492f737140b536bf7
- SHA1
  
  dc32cbccab029046c27f4a43be802b9f37fe932e
- SHA256
  
  b1cbe50c00ba8c397d2eabe9d0c2ebc9fc175455f9a6c9ea0b481f79ff7cab8f
- SHA512
  
  7cee1ce8079f40c1804d3b553b4859b8ab1c6f700b4f637cd72c6702aaa19fe5e64b71f1048faa6a1246892cef482dc46bd6fef0b4b76433b75c31c33a7116d2
- SSDEEP
  
  6144:UJVwm2i+mKaN68U8Wdvym8fXZkP/L07IkX/c6MVO4zXUdn1NwBLDmFBF3UN:rri+m/A4Wx3UG/LzARMVO4sNyDm3F3U
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy