expiro | b3fd5376857869589358085e208a504d6cc1bbd6524ccce3ff30ee760a836765 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...d8.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_94fcd50304a513723c19484617f7ded8
Size

432KB
Sample

250108-j35rbstnhn
MD5

94fcd50304a513723c19484617f7ded8
SHA1

bfd638ef2dca247ccd94ca4189de3421b5794fc7
SHA256

b3fd5376857869589358085e208a504d6cc1bbd6524ccce3ff30ee760a836765
SHA512

f34951b8c4d37790be1528c950602c5c92c728eab66ebbbc8df555aa47df8efac0f347eec07af575f899dd1164b5b96ec5f90526d8b94c899fbb482bb915da23
SSDEEP

12288:iUCmZiCMCj0RV1pWUCszes8aNZ3HeSiqLSarxtyZl:ICWRaav5iqGHZ

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_94fcd50304a513723c19484617f7ded8.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_94fcd50304a513723c19484617f7ded8
- Size
  
  432KB
- MD5
  
  94fcd50304a513723c19484617f7ded8
- SHA1
  
  bfd638ef2dca247ccd94ca4189de3421b5794fc7
- SHA256
  
  b3fd5376857869589358085e208a504d6cc1bbd6524ccce3ff30ee760a836765
- SHA512
  
  f34951b8c4d37790be1528c950602c5c92c728eab66ebbbc8df555aa47df8efac0f347eec07af575f899dd1164b5b96ec5f90526d8b94c899fbb482bb915da23
- SSDEEP
  
  12288:iUCmZiCMCj0RV1pWUCszes8aNZ3HeSiqLSarxtyZl:ICWRaav5iqGHZ
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy