expiro | a663daf8e3e258246aa9c5979e110f0bc00cd4c7efb95932557998af9aa6f05f | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...f5.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_b341048550c301ee95c8a58c5fdbe8f5
Size

200KB
Sample

250413-ckqfcswqz5
MD5

b341048550c301ee95c8a58c5fdbe8f5
SHA1

213c35b7f693a39a378544811c671a746dc73a9d
SHA256

a663daf8e3e258246aa9c5979e110f0bc00cd4c7efb95932557998af9aa6f05f
SHA512

9705ac5ffa44e20ab1c6a169e39756d46b100e29c4f17cc83a01d131823b2ecfe746d0ed9550685013b0fa52df6c9f2ece6b057aad687ddfc1117899acc44ea7
SSDEEP

3072:j90cin+tQmBJCHBgyAc8/YKyCyWXNxdBBXaQczOvcP81eWReAtK2MgfbiEI:J0NnJ6JCh8/YK3XtkmZkAtRfbiE

Score

10^/10

expiro backdoor discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_b341048550c301ee95c8a58c5fdbe8f5.exe

Resource

win10v2004-20250410-en

expiro backdoor discovery

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_b341048550c301ee95c8a58c5fdbe8f5
- Size
  
  200KB
- MD5
  
  b341048550c301ee95c8a58c5fdbe8f5
- SHA1
  
  213c35b7f693a39a378544811c671a746dc73a9d
- SHA256
  
  a663daf8e3e258246aa9c5979e110f0bc00cd4c7efb95932557998af9aa6f05f
- SHA512
  
  9705ac5ffa44e20ab1c6a169e39756d46b100e29c4f17cc83a01d131823b2ecfe746d0ed9550685013b0fa52df6c9f2ece6b057aad687ddfc1117899acc44ea7
- SSDEEP
  
  3072:j90cin+tQmBJCHBgyAc8/YKyCyWXNxdBBXaQczOvcP81eWReAtK2MgfbiEI:J0NnJ6JCh8/YK3XtkmZkAtRfbiE
Score

10^/10

expiro backdoor discovery
- Expiro family
  expiro
- Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Expiro payload
  backdoor
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

expirobackdoordiscovery

© 2018-2025

Terms | Privacy