expiro | ac946ed9b94e7c088b6b42b6be3666d721b1493fff74c05c08519673efb4dda8 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...26.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_b2b673450d620f4213666249a6a87e26
Size

225KB
Sample

250412-s6kp1axwex
MD5

b2b673450d620f4213666249a6a87e26
SHA1

18506242eb60b5b11bf2f2ce86783f92ce80c3f2
SHA256

ac946ed9b94e7c088b6b42b6be3666d721b1493fff74c05c08519673efb4dda8
SHA512

1a46440c265823d8f4da944fe4514ef0d7f8cf7409bd213ce3e57da2483a5973d1116149abdcd24b02bec4f587203cb98b39c56305119b9e3e4fb3d9786b45d4
SSDEEP

6144:DqmUaB9kc1jAhiDTuL0n49Uvw0Vqi44wZRijbJ5vj:ePjh8jmUvw0VqHlZRgbzj

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_b2b673450d620f4213666249a6a87e26.exe

Resource

win10v2004-20250410-en

expiro backdoor discovery

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_b2b673450d620f4213666249a6a87e26
- Size
  
  225KB
- MD5
  
  b2b673450d620f4213666249a6a87e26
- SHA1
  
  18506242eb60b5b11bf2f2ce86783f92ce80c3f2
- SHA256
  
  ac946ed9b94e7c088b6b42b6be3666d721b1493fff74c05c08519673efb4dda8
- SHA512
  
  1a46440c265823d8f4da944fe4514ef0d7f8cf7409bd213ce3e57da2483a5973d1116149abdcd24b02bec4f587203cb98b39c56305119b9e3e4fb3d9786b45d4
- SSDEEP
  
  6144:DqmUaB9kc1jAhiDTuL0n49Uvw0Vqi44wZRijbJ5vj:ePjh8jmUvw0VqHlZRgbzj
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

© 2018-2025

Terms | Privacy