Overview

overview

10

Static

static

3

2025-02-14...er.exe

windows7-x64

10

2025-02-14...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-14_b30fc40f60729c4e14e8d7276d47b9fe_magniber

  • Size

    1.9MB

  • Sample

    250214-cle11szjhx

  • MD5

    b30fc40f60729c4e14e8d7276d47b9fe

  • SHA1

    fd15c0c7750ebee85ff224920450539b61499392

  • SHA256

    74a187f412deae4220360da0f0bf18e4d4ef6eacff55f8899b029db9ab5e74d3

  • SHA512

    86bd4959cefe624b3d7969f0ccb0f538e4531f4bee1ac58f65ca99aadf3f4df58070414014308ac92d58f669916d7a525e67908dca83354158184e92f272e07b

  • SSDEEP

    49152:ry6qY5DKxS9solEvv2l9/G7irIfu4xuaRPGb+xJ9P2Y8cvT:ryxJq/trIfuERPAu9wcv

Score
10/10
expirobackdoordiscovery

Malware Config

Targets

    • Target

      2025-02-14_b30fc40f60729c4e14e8d7276d47b9fe_magniber

    • Size

      1.9MB

    • MD5

      b30fc40f60729c4e14e8d7276d47b9fe

    • SHA1

      fd15c0c7750ebee85ff224920450539b61499392

    • SHA256

      74a187f412deae4220360da0f0bf18e4d4ef6eacff55f8899b029db9ab5e74d3

    • SHA512

      86bd4959cefe624b3d7969f0ccb0f538e4531f4bee1ac58f65ca99aadf3f4df58070414014308ac92d58f669916d7a525e67908dca83354158184e92f272e07b

    • SSDEEP

      49152:ry6qY5DKxS9solEvv2l9/G7irIfu4xuaRPGb+xJ9P2Y8cvT:ryxJq/trIfuERPAu9wcv

    Score
    10/10
    expirobackdoordiscovery

    • Expiro family

      expiro

    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

      backdoorexpiro

    • Expiro payload

      backdoor

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks