expiro | 2e6bcc3aa3a4111646b81212eb4ccb78b48bc358fb8ed34db670fdc7e83ab604 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...37.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_637fcd2fa29365b7a8bcc9b19b7c8f37
Size

432KB
Sample

250107-pxs38s1phz
MD5

637fcd2fa29365b7a8bcc9b19b7c8f37
SHA1

264e785b323c5e9057adc9d8dc5e52f63b7a1bca
SHA256

2e6bcc3aa3a4111646b81212eb4ccb78b48bc358fb8ed34db670fdc7e83ab604
SHA512

6df0f2b5428f930053a504ce586dd319f253a416268db54fe849294cad54cbb20eefc7e7d4e9d7ba04f4d6deebca1cd2f2c35db0eceb7f307c656d9e8685119b
SSDEEP

12288:SUCmZiCxbr+N1Hh7lvcOcIZaUO30rX1I9ixey:YCxbSzHLEON9O3oi9s

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_637fcd2fa29365b7a8bcc9b19b7c8f37.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_637fcd2fa29365b7a8bcc9b19b7c8f37
- Size
  
  432KB
- MD5
  
  637fcd2fa29365b7a8bcc9b19b7c8f37
- SHA1
  
  264e785b323c5e9057adc9d8dc5e52f63b7a1bca
- SHA256
  
  2e6bcc3aa3a4111646b81212eb4ccb78b48bc358fb8ed34db670fdc7e83ab604
- SHA512
  
  6df0f2b5428f930053a504ce586dd319f253a416268db54fe849294cad54cbb20eefc7e7d4e9d7ba04f4d6deebca1cd2f2c35db0eceb7f307c656d9e8685119b
- SSDEEP
  
  12288:SUCmZiCxbr+N1Hh7lvcOcIZaUO30rX1I9ixey:YCxbSzHLEON9O3oi9s
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy