expiro | 3d723362d7915e835f9ff27aeeaa5ef47d169ead13f59c3d06beffa2a040283e

General

Target
2026-08-03_d4c26b0584bfecd2987f67a8055e4dfc_amadey_elex_luca-stealer_njrat_smoke-loader
Size 2.0MB
Sample260803-va21hsv1ht
SHA256 3d723362d7915e835f9ff27aeeaa5ef47d169ead13f59c3d06beffa2a040283e
MD5 d4c26b0584bfecd2987f67a8055e4dfc
SHA1 7876f19c284ed0205173f59d2bd27a468d0a2c3a
SHA512 1925aa68c9feb1912108ae8f77d2f8f8788213114febc1ed49aeff348a9a1ea0c0e3f702cfe693b9ea523f0f15960b3940948d39fb85bf0c4925461209f45262
SSDEEP 24576:QGyWem1gXq5L9uSWidgpm6hbpOSRKQVn6R5zwUqMpcWuh4epMWF6wTVTK:Q1Xq5L9uiibpJKQGcWqnnT
TLSH
T1EAA56C0DB7A1502CFDF305FA4AFE63ACA82CB9A0076894D352C416DED725AE57C32653
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-03_d4c26b0584bfecd2987f67a8055e4dfc_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 2.0MB
- SHA256 3d723362d7915e835f9ff27aeeaa5ef47d169ead13f59c3d06beffa2a040283e
- MD5 d4c26b0584bfecd2987f67a8055e4dfc
- SHA1 7876f19c284ed0205173f59d2bd27a468d0a2c3a
- SHA512 1925aa68c9feb1912108ae8f77d2f8f8788213114febc1ed49aeff348a9a1ea0c0e3f702cfe693b9ea523f0f15960b3940948d39fb85bf0c4925461209f45262
- SSDEEP 24576:QGyWem1gXq5L9uSWidgpm6hbpOSRKQVn6R5zwUqMpcWuh4epMWF6wTVTK:Q1Xq5L9uiibpJKQGcWqnnT
- TLSH
  T1EAA56C0DB7A1502CFDF305FA4AFE63ACA82CB9A0076894D352C416DED725AE57C32653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor credential_access defense_evasion discovery expiro spyware stealer trojan
- Expiro payload
  backdoor
- Family: Expiro, m0yv
  Expiro aka m0yv is a multi-functional backdoor written in C++.
  backdoor expiro
- Disables taskbar notifications via registry modification
  defense_evasion
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Windows security modification
  defense_evasion trojan
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2