expiro | c05d4153b14b7e4668a8c8bbfbe73dd32c061fd935aac9af0361684b26737d32 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...a7.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_a9e5969f81d5bd3d8c6c304bf5fd6da7
Size

432KB
Sample

250108-yx26kstpcp
MD5

a9e5969f81d5bd3d8c6c304bf5fd6da7
SHA1

9769ad516fd2959bf03ce8886ab823672557538d
SHA256

c05d4153b14b7e4668a8c8bbfbe73dd32c061fd935aac9af0361684b26737d32
SHA512

e39f561f82a17af9addcc604bf1bf1cb1758a7c0dea96ea6183780f93fc71ccdf0537a4e5af8d8a72e948c95ba5187f24a07e5d49652d70e2c76af4321fa14eb
SSDEEP

12288:1UCmZiCBBKk7xZM8dVeJpnMAgkfTd40M:3CjZZM8dAnQ

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_a9e5969f81d5bd3d8c6c304bf5fd6da7.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_a9e5969f81d5bd3d8c6c304bf5fd6da7
- Size
  
  432KB
- MD5
  
  a9e5969f81d5bd3d8c6c304bf5fd6da7
- SHA1
  
  9769ad516fd2959bf03ce8886ab823672557538d
- SHA256
  
  c05d4153b14b7e4668a8c8bbfbe73dd32c061fd935aac9af0361684b26737d32
- SHA512
  
  e39f561f82a17af9addcc604bf1bf1cb1758a7c0dea96ea6183780f93fc71ccdf0537a4e5af8d8a72e948c95ba5187f24a07e5d49652d70e2c76af4321fa14eb
- SSDEEP
  
  12288:1UCmZiCBBKk7xZM8dVeJpnMAgkfTd40M:3CjZZM8dAnQ
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy