expiro | 2401f64f412bdcdefbe75b2210659a05598d39bfd499f31bf87602d7978e8497 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...6d.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_0af3ee986adb2ce0552ca303e412c36d
Size

432KB
Sample

250106-dnqqzawrbk
MD5

0af3ee986adb2ce0552ca303e412c36d
SHA1

a773398f772778546675f6c0fc60ca045b4308f0
SHA256

2401f64f412bdcdefbe75b2210659a05598d39bfd499f31bf87602d7978e8497
SHA512

d856f81b7301cf49fbd952944d790025872cb528cb60921a21f31b65017f7b4dfa414eb9c59c9852c9d156a0baaef6c38a3444fd72bc3312c363e9a731134a49
SSDEEP

12288:LUCmZiC0HEXQPoNvXY2a0Su+eun7OnNPKMhr:FC0kX0oNfYvpF7wRKMh

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_0af3ee986adb2ce0552ca303e412c36d.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_0af3ee986adb2ce0552ca303e412c36d
- Size
  
  432KB
- MD5
  
  0af3ee986adb2ce0552ca303e412c36d
- SHA1
  
  a773398f772778546675f6c0fc60ca045b4308f0
- SHA256
  
  2401f64f412bdcdefbe75b2210659a05598d39bfd499f31bf87602d7978e8497
- SHA512
  
  d856f81b7301cf49fbd952944d790025872cb528cb60921a21f31b65017f7b4dfa414eb9c59c9852c9d156a0baaef6c38a3444fd72bc3312c363e9a731134a49
- SSDEEP
  
  12288:LUCmZiC0HEXQPoNvXY2a0Su+eun7OnNPKMhr:FC0kX0oNfYvpF7wRKMh
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy