expiro | b525b3491f0f66a0454b1a2e9730b75cf5f30a518101cf0d0179874ae43081c8 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...82.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_7c6428d595e07abef567f925f1778082
Size

432KB
Sample

250107-195hks1nhy
MD5

7c6428d595e07abef567f925f1778082
SHA1

9fcf2c3c205b00158fc9751156dddb7327750d14
SHA256

b525b3491f0f66a0454b1a2e9730b75cf5f30a518101cf0d0179874ae43081c8
SHA512

12cd98eef56bbd561b59489a4c27b66114a3c8d56cdca4756b9eb551e80a14fd8ba1078f4f1e4d61d56ba7d5886d669b894b42d2e7d3933f38870906647d9b4e
SSDEEP

12288:DUCmZiCPIHaKcomOgrSu+eun7OnNPKMhr:NCPIHaK9mOgWF7wRKMh

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_7c6428d595e07abef567f925f1778082.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_7c6428d595e07abef567f925f1778082
- Size
  
  432KB
- MD5
  
  7c6428d595e07abef567f925f1778082
- SHA1
  
  9fcf2c3c205b00158fc9751156dddb7327750d14
- SHA256
  
  b525b3491f0f66a0454b1a2e9730b75cf5f30a518101cf0d0179874ae43081c8
- SHA512
  
  12cd98eef56bbd561b59489a4c27b66114a3c8d56cdca4756b9eb551e80a14fd8ba1078f4f1e4d61d56ba7d5886d669b894b42d2e7d3933f38870906647d9b4e
- SSDEEP
  
  12288:DUCmZiCPIHaKcomOgrSu+eun7OnNPKMhr:NCPIHaK9mOgWF7wRKMh
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy