expiro | 5a8bed8daf6195804751fce0c222fea9e0bc9cd402de9edf71c5cc08addf8603 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...a6.exe

windows7-x64

JaffaCakes...a6.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_a0a0b4888072e459adb99ecd803659a6
Size

284KB
Sample

250205-r1x8gasmdr
MD5

a0a0b4888072e459adb99ecd803659a6
SHA1

9252e972dff2920ae25cf6894b31f091d7dd59e5
SHA256

5a8bed8daf6195804751fce0c222fea9e0bc9cd402de9edf71c5cc08addf8603
SHA512

552df870ab8309714eeba1a28f6260af68dfd8f2191099639cec39efc1960a15f799caf9b89c09e90c03fcd365631210e4039eb3e8db8ad8ed2d1ac247f9d984
SSDEEP

6144:/N7RZ9+t5QY8iJYeDZim5EsP3c1/n2pzjyWPhnYVryyl0oebkhH:1P9+t5QiJ7im5EKshufyWPe0

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_a0a0b4888072e459adb99ecd803659a6.exe

Resource

win7-20240903-en

expiro backdoor discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_a0a0b4888072e459adb99ecd803659a6.exe

Resource

win10v2004-20250129-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_a0a0b4888072e459adb99ecd803659a6
- Size
  
  284KB
- MD5
  
  a0a0b4888072e459adb99ecd803659a6
- SHA1
  
  9252e972dff2920ae25cf6894b31f091d7dd59e5
- SHA256
  
  5a8bed8daf6195804751fce0c222fea9e0bc9cd402de9edf71c5cc08addf8603
- SHA512
  
  552df870ab8309714eeba1a28f6260af68dfd8f2191099639cec39efc1960a15f799caf9b89c09e90c03fcd365631210e4039eb3e8db8ad8ed2d1ac247f9d984
- SSDEEP
  
  6144:/N7RZ9+t5QY8iJYeDZim5EsP3c1/n2pzjyWPhnYVryyl0oebkhH:1P9+t5QiJ7im5EKshufyWPe0
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

behavioral2

expirobackdoordiscovery

© 2018-2025

Terms | Privacy