expiro | d1691286e6b9af2db177707e3f33c9c7cc2e310f856c7daa735b7d2c57d6138c | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...4f.exe

windows7-x64

JaffaCakes...4f.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_de1349b7605a5c63c02ca0702de7f24f
Size

457KB
Sample

250110-h1b6kawnht
MD5

de1349b7605a5c63c02ca0702de7f24f
SHA1

9283617bac78ec57c43c57414a4b0e063b8a4c99
SHA256

d1691286e6b9af2db177707e3f33c9c7cc2e310f856c7daa735b7d2c57d6138c
SHA512

1193ca8563de69cdb5e167e29b6bffdd0121282ffd5b08033fcc1d29f39687a375b2d2a879b6683a74cb32cb4174c5377304a499e68aa6a1fc8394147b6d8ea6
SSDEEP

6144:LZPEOK99kXpOXOqbLUeBNZM1uboEuSqbE2EHexnhpO1kaNf6qlAt:L5ijbweTEubQ82EHOYXNfVW

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_de1349b7605a5c63c02ca0702de7f24f.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_de1349b7605a5c63c02ca0702de7f24f.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_de1349b7605a5c63c02ca0702de7f24f
- Size
  
  457KB
- MD5
  
  de1349b7605a5c63c02ca0702de7f24f
- SHA1
  
  9283617bac78ec57c43c57414a4b0e063b8a4c99
- SHA256
  
  d1691286e6b9af2db177707e3f33c9c7cc2e310f856c7daa735b7d2c57d6138c
- SHA512
  
  1193ca8563de69cdb5e167e29b6bffdd0121282ffd5b08033fcc1d29f39687a375b2d2a879b6683a74cb32cb4174c5377304a499e68aa6a1fc8394147b6d8ea6
- SSDEEP
  
  6144:LZPEOK99kXpOXOqbLUeBNZM1uboEuSqbE2EHexnhpO1kaNf6qlAt:L5ijbweTEubQ82EHOYXNfVW
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy