expiro | 99478139dfb8c2c65588f1677327217defe58399ea62f44758d2f7a8637009e2 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...c6.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_5b70a09f40f31f185ba945d04fa3eec6
Size

432KB
Sample

250107-lmqnksvqat
MD5

5b70a09f40f31f185ba945d04fa3eec6
SHA1

08a3943a537b9e1f3f790348eb53c747f0cdf6a0
SHA256

99478139dfb8c2c65588f1677327217defe58399ea62f44758d2f7a8637009e2
SHA512

cf8da0803f8c0e92dc8f76fbec880d453a17e21bdb9848f78794dc2f1c58f3e58ce910ebafc9fdf41ded0a0e46983b795f560ca7f4f2bf3b37e54b090c53c6f2
SSDEEP

6144:TFUCmZqoFWC6x0jzzwJg5ECOapbJaJQ3D9oZydH9kudseypDc7t8O0YFtmXCFLH8:JUCmZiCzcJg5/PbRz9oEVdLqW8kF4Su

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_5b70a09f40f31f185ba945d04fa3eec6.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_5b70a09f40f31f185ba945d04fa3eec6
- Size
  
  432KB
- MD5
  
  5b70a09f40f31f185ba945d04fa3eec6
- SHA1
  
  08a3943a537b9e1f3f790348eb53c747f0cdf6a0
- SHA256
  
  99478139dfb8c2c65588f1677327217defe58399ea62f44758d2f7a8637009e2
- SHA512
  
  cf8da0803f8c0e92dc8f76fbec880d453a17e21bdb9848f78794dc2f1c58f3e58ce910ebafc9fdf41ded0a0e46983b795f560ca7f4f2bf3b37e54b090c53c6f2
- SSDEEP
  
  6144:TFUCmZqoFWC6x0jzzwJg5ECOapbJaJQ3D9oZydH9kudseypDc7t8O0YFtmXCFLH8:JUCmZiCzcJg5/PbRz9oEVdLqW8kF4Su
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy