expiro | e37ac3c349a21d35b0fbe6ecf4e7512bd919f6283ceeaf754800a10744e397d5 | Triage

Submit
Reports

Overview

overview

Static

static

3

e37ac3c349...d5.exe

windows7-x64

e37ac3c349...d5.exe

windows10-2004-x64

Sharing

General

Target

e37ac3c349a21d35b0fbe6ecf4e7512bd919f6283ceeaf754800a10744e397d5
Size

755KB
Sample

250126-hnsmsavpay
MD5

4dcf11c8230e4dc5c56df5450494741b
SHA1

25ec684461774bf41de06fc35bbf56e83afa9b66
SHA256

e37ac3c349a21d35b0fbe6ecf4e7512bd919f6283ceeaf754800a10744e397d5
SHA512

1822df9356d1ec5eae98ebcb84c9b1e8599af60670778f3f3068ea6681f378986aeaeb041e00a48b336255fb43e0fb9fc57e79ffe2b757ac12372dbfbde21c24
SSDEEP

12288:x7gKNkhm/JuyXnPB+h8WHtFRDNMD7rFmKJYjaVA0bI/e5zdOgTQq:x7zNkhm5PBXoFRBYkSYjaVA6I21dOgT

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e37ac3c349a21d35b0fbe6ecf4e7512bd919f6283ceeaf754800a10744e397d5.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

e37ac3c349a21d35b0fbe6ecf4e7512bd919f6283ceeaf754800a10744e397d5.exe

Resource

win10v2004-20241007-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  e37ac3c349a21d35b0fbe6ecf4e7512bd919f6283ceeaf754800a10744e397d5
- Size
  
  755KB
- MD5
  
  4dcf11c8230e4dc5c56df5450494741b
- SHA1
  
  25ec684461774bf41de06fc35bbf56e83afa9b66
- SHA256
  
  e37ac3c349a21d35b0fbe6ecf4e7512bd919f6283ceeaf754800a10744e397d5
- SHA512
  
  1822df9356d1ec5eae98ebcb84c9b1e8599af60670778f3f3068ea6681f378986aeaeb041e00a48b336255fb43e0fb9fc57e79ffe2b757ac12372dbfbde21c24
- SSDEEP
  
  12288:x7gKNkhm/JuyXnPB+h8WHtFRDNMD7rFmKJYjaVA0bI/e5zdOgTQq:x7zNkhm5PBXoFRBYkSYjaVA6I21dOgT
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy