expiro | 3ec5f8d4b6da0a9c667831b750e7c467a4e4027e1746ea9f94f886935f8c56cd | Triage

Sharing

General

Target

JaffaCakes118_080e715cb7fff5b2f347f54eff746d07
Size

181KB
Sample

250121-2kwd2svjgx
MD5

080e715cb7fff5b2f347f54eff746d07
SHA1

492c1307e2dbfabc47b76a21102087c5f89b3ee6
SHA256

3ec5f8d4b6da0a9c667831b750e7c467a4e4027e1746ea9f94f886935f8c56cd
SHA512

e7f3ecbe2551eaf7e681b8db1234a8d321b41b63519d6bd43dc5e9d315425c7039f06f4033a4e5461a576351aaf015f435f6f58afdc060bb23601b317e58788c
SSDEEP

3072:h/8k3jqwrIwc61nNIX/mI5Vxl+aCVRJUL+Stv1K888n717OmYOCjzBLPHWOHWW8N:R5j8wc6cXy7XOvuQ71ymYftJL8G

Score

10^/10

expiro backdoor discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_080e715cb7fff5b2f347f54eff746d07
- Size
  
  181KB
- MD5
  
  080e715cb7fff5b2f347f54eff746d07
- SHA1
  
  492c1307e2dbfabc47b76a21102087c5f89b3ee6
- SHA256
  
  3ec5f8d4b6da0a9c667831b750e7c467a4e4027e1746ea9f94f886935f8c56cd
- SHA512
  
  e7f3ecbe2551eaf7e681b8db1234a8d321b41b63519d6bd43dc5e9d315425c7039f06f4033a4e5461a576351aaf015f435f6f58afdc060bb23601b317e58788c
- SSDEEP
  
  3072:h/8k3jqwrIwc61nNIX/mI5Vxl+aCVRJUL+Stv1K888n717OmYOCjzBLPHWOHWW8N:R5j8wc6cXy7XOvuQ71ymYftJL8G
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2