expiro | 4e7c3947b7a01d853dcae4340fb8a35baaa57182f63b9ef0a70c6d12c1b610e5 | Triage

Submit
Reports

Overview

overview

Static

static

3

4e7c3947b7...5N.exe

windows7-x64

4e7c3947b7...5N.exe

windows10-2004-x64

Sharing

General

Target

4e7c3947b7a01d853dcae4340fb8a35baaa57182f63b9ef0a70c6d12c1b610e5N.exe
Size

285KB
Sample

250106-22bqzatqcm
MD5

784c00f0696ff1247fee9f95c8a3a310
SHA1

c5d4a91236e72ebeea2092ef109a4384455292f4
SHA256

4e7c3947b7a01d853dcae4340fb8a35baaa57182f63b9ef0a70c6d12c1b610e5
SHA512

b9af02594bef91781b1b808c9786f437eb16f0ff2f3ae1639a5ccd19c716cccfd8e6063fcd5cfc26800e9b71483375c5ee45a0eb25dff6fd8d5415ebde9cf11a
SSDEEP

6144:tOWCm+/c7R8Hm2rupNeanGnHNY9kkwjSz6YdXtwO2+ynTXSjrYQImYsRaTVrG36I:rMU7R8BSgmGntY9ojy6YdmOjmbSnRImb

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4e7c3947b7a01d853dcae4340fb8a35baaa57182f63b9ef0a70c6d12c1b610e5N.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

120 seconds

Behavioral task

behavioral2

Sample

4e7c3947b7a01d853dcae4340fb8a35baaa57182f63b9ef0a70c6d12c1b610e5N.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  4e7c3947b7a01d853dcae4340fb8a35baaa57182f63b9ef0a70c6d12c1b610e5N.exe
- Size
  
  285KB
- MD5
  
  784c00f0696ff1247fee9f95c8a3a310
- SHA1
  
  c5d4a91236e72ebeea2092ef109a4384455292f4
- SHA256
  
  4e7c3947b7a01d853dcae4340fb8a35baaa57182f63b9ef0a70c6d12c1b610e5
- SHA512
  
  b9af02594bef91781b1b808c9786f437eb16f0ff2f3ae1639a5ccd19c716cccfd8e6063fcd5cfc26800e9b71483375c5ee45a0eb25dff6fd8d5415ebde9cf11a
- SSDEEP
  
  6144:tOWCm+/c7R8Hm2rupNeanGnHNY9kkwjSz6YdXtwO2+ynTXSjrYQImYsRaTVrG36I:rMU7R8BSgmGntY9ojy6YdmOjmbSnRImb
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy