expiro | 5cff3e609c45983d3375436aed7d89136f213b021b7fa1256e5ef4f8c7cdd167 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...be.exe

windows7-x64

JaffaCakes...be.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_d3b89bdcb4a0d15780b2bc5661ae78be
Size

415KB
Sample

250109-17dbbavnaq
MD5

d3b89bdcb4a0d15780b2bc5661ae78be
SHA1

7e56ee6b510d3588b6ac19beb2b3f16d8be98cc7
SHA256

5cff3e609c45983d3375436aed7d89136f213b021b7fa1256e5ef4f8c7cdd167
SHA512

ebd423a9fbf02fc90c54b7d9ee104abfad1e02706b469a7abb14bf3b0958876db11a989bf6884d8bb40a37ca870b93085d42bccc2a889ab2a5a77b27199f44c7
SSDEEP

12288:9r2yKsiDH+O0LnQQCpGOnVRBqyDXkFbNfu:9r2yKsi30EQhAVOc

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_d3b89bdcb4a0d15780b2bc5661ae78be.exe

Resource

win7-20240903-en

expiro backdoor

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_d3b89bdcb4a0d15780b2bc5661ae78be.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_d3b89bdcb4a0d15780b2bc5661ae78be
- Size
  
  415KB
- MD5
  
  d3b89bdcb4a0d15780b2bc5661ae78be
- SHA1
  
  7e56ee6b510d3588b6ac19beb2b3f16d8be98cc7
- SHA256
  
  5cff3e609c45983d3375436aed7d89136f213b021b7fa1256e5ef4f8c7cdd167
- SHA512
  
  ebd423a9fbf02fc90c54b7d9ee104abfad1e02706b469a7abb14bf3b0958876db11a989bf6884d8bb40a37ca870b93085d42bccc2a889ab2a5a77b27199f44c7
- SSDEEP
  
  12288:9r2yKsiDH+O0LnQQCpGOnVRBqyDXkFbNfu:9r2yKsi30EQhAVOc
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy