expiro | 3b4f58f713fac136b2f4e7ab3c1684963fca697adf78ebab68b47ca660054ca1 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...f2.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_af49da143d00f8f932389a37deeb03f2
Size

324KB
Sample

250411-vysfzswsaz
MD5

af49da143d00f8f932389a37deeb03f2
SHA1

ba9eac27b56ed359d5dda46b88949d3b9ce91858
SHA256

3b4f58f713fac136b2f4e7ab3c1684963fca697adf78ebab68b47ca660054ca1
SHA512

3f7e239cdf9dfee4381bd12108bad2b8b4da7447408436bcfcbd1778761200715039a7dcf19a4ad5e28ae48c92150c45f56415d65eb2f0dfcbe36da5e41d7d44
SSDEEP

6144:FUk69bJcXGOignKgHNDscKyZ4fIFDBU5lATn8F5QYDsa1:FUkENCDXn8J

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_af49da143d00f8f932389a37deeb03f2.exe

Resource

win10v2004-20250410-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_af49da143d00f8f932389a37deeb03f2
- Size
  
  324KB
- MD5
  
  af49da143d00f8f932389a37deeb03f2
- SHA1
  
  ba9eac27b56ed359d5dda46b88949d3b9ce91858
- SHA256
  
  3b4f58f713fac136b2f4e7ab3c1684963fca697adf78ebab68b47ca660054ca1
- SHA512
  
  3f7e239cdf9dfee4381bd12108bad2b8b4da7447408436bcfcbd1778761200715039a7dcf19a4ad5e28ae48c92150c45f56415d65eb2f0dfcbe36da5e41d7d44
- SSDEEP
  
  6144:FUk69bJcXGOignKgHNDscKyZ4fIFDBU5lATn8F5QYDsa1:FUkENCDXn8J
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

© 2018-2025

Terms | Privacy