expiro | dcd9f801d6b986f9ed4707022d65d7cad5db06ff8e85f6b2ec40d7483fb9432e | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...fd.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_d48fbbce1ec5a96891a6f555f4387bfd
Size

432KB
Sample

250109-2z2jlswlcj
MD5

d48fbbce1ec5a96891a6f555f4387bfd
SHA1

81cbc07c2f86c112f61d9ea988185b6542a8b3f4
SHA256

dcd9f801d6b986f9ed4707022d65d7cad5db06ff8e85f6b2ec40d7483fb9432e
SHA512

757cdcedaa38710e0774e8f3db322a4389113d02f2fcd32b64baef38640d616c8b23b3876cf2ff3cf902fe58d57c0b4d75439a274affd187dc14052e08f97ba1
SSDEEP

12288:AUCmZiCY11Gkw/dskakSBYibprEyFPcGcSrkCxwMjrO2:mCk+bQYi6yFsSbxbrO

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_d48fbbce1ec5a96891a6f555f4387bfd.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_d48fbbce1ec5a96891a6f555f4387bfd
- Size
  
  432KB
- MD5
  
  d48fbbce1ec5a96891a6f555f4387bfd
- SHA1
  
  81cbc07c2f86c112f61d9ea988185b6542a8b3f4
- SHA256
  
  dcd9f801d6b986f9ed4707022d65d7cad5db06ff8e85f6b2ec40d7483fb9432e
- SHA512
  
  757cdcedaa38710e0774e8f3db322a4389113d02f2fcd32b64baef38640d616c8b23b3876cf2ff3cf902fe58d57c0b4d75439a274affd187dc14052e08f97ba1
- SSDEEP
  
  12288:AUCmZiCY11Gkw/dskakSBYibprEyFPcGcSrkCxwMjrO2:mCk+bQYi6yFsSbxbrO
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy