expiro | 9844d9821d8e1f35fe757888fe608423a2d3c82573f9659f24bbb36b021f6120 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...b6.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_d5b7f1fd3035d228917ef602b0822eb6
Size

432KB
Sample

250110-aak2saxlfm
MD5

d5b7f1fd3035d228917ef602b0822eb6
SHA1

6b817ac9aa8a9418e0691e94ea9d7dd592c4697e
SHA256

9844d9821d8e1f35fe757888fe608423a2d3c82573f9659f24bbb36b021f6120
SHA512

5f92b34725adf2793e21ccd631d2b0dcb75c97ae4fdf3c479091a6641c64a63ae8da5ce2e276ccd61999bf5f05445e695837b5c4016f580fbb95029045900c2c
SSDEEP

12288:eUCmZiCYsQXO3I+QkDzm9hEdekz0nWG6yoRvx:sCdQXO3I+QkDzm9hCDz0DWR

Score

10^/10

expiro backdoor

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_d5b7f1fd3035d228917ef602b0822eb6.exe

Resource

win10v2004-20241007-en

expiro backdoor

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_d5b7f1fd3035d228917ef602b0822eb6
- Size
  
  432KB
- MD5
  
  d5b7f1fd3035d228917ef602b0822eb6
- SHA1
  
  6b817ac9aa8a9418e0691e94ea9d7dd592c4697e
- SHA256
  
  9844d9821d8e1f35fe757888fe608423a2d3c82573f9659f24bbb36b021f6120
- SHA512
  
  5f92b34725adf2793e21ccd631d2b0dcb75c97ae4fdf3c479091a6641c64a63ae8da5ce2e276ccd61999bf5f05445e695837b5c4016f580fbb95029045900c2c
- SSDEEP
  
  12288:eUCmZiCYsQXO3I+QkDzm9hEdekz0nWG6yoRvx:sCdQXO3I+QkDzm9hCDz0DWR
Score

10^/10

expiro backdoor
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy