expiro | 91e218a730f3d5b8c88fdf5afb6a54b910fcc4f4c3fa0790d533accded7476b4 | Triage

Submit
Reports

Overview

overview

Static

static

3

91e218a730...b4.exe

windows10-2004-x64

Sharing

General

Target

91e218a730f3d5b8c88fdf5afb6a54b910fcc4f4c3fa0790d533accded7476b4
Size

599KB
Sample

250411-vwky5av1ds
MD5

d782668484e4af52171d5dd77bade042
SHA1

700e08c97254d3912a3c9e6d89578748ad2e6371
SHA256

91e218a730f3d5b8c88fdf5afb6a54b910fcc4f4c3fa0790d533accded7476b4
SHA512

5f8e3e4b4d73eb3cd26cc67de6e3c8735969c5f33b2cae95586b388075d8eaab46a596380a383b5bbff2ef55cfb4aa9ebc13ae0d8085fd00b717d252ef5ea0e9
SSDEEP

12288:F7gKNkhm/JuyXnPB+h8WHe8/jBGs5HdUV:F7zNkhm5PBX/8/jdd

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

91e218a730f3d5b8c88fdf5afb6a54b910fcc4f4c3fa0790d533accded7476b4.exe

Resource

win10v2004-20250410-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  91e218a730f3d5b8c88fdf5afb6a54b910fcc4f4c3fa0790d533accded7476b4
- Size
  
  599KB
- MD5
  
  d782668484e4af52171d5dd77bade042
- SHA1
  
  700e08c97254d3912a3c9e6d89578748ad2e6371
- SHA256
  
  91e218a730f3d5b8c88fdf5afb6a54b910fcc4f4c3fa0790d533accded7476b4
- SHA512
  
  5f8e3e4b4d73eb3cd26cc67de6e3c8735969c5f33b2cae95586b388075d8eaab46a596380a383b5bbff2ef55cfb4aa9ebc13ae0d8085fd00b717d252ef5ea0e9
- SSDEEP
  
  12288:F7gKNkhm/JuyXnPB+h8WHe8/jBGs5HdUV:F7zNkhm5PBX/8/jdd
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

© 2018-2025

Terms | Privacy