Overview

overview

10

Static

static

3

Backdoor.W...or.exe

windows7-x64

10

Backdoor.W...or.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Backdoor.Win32.Padodor.gen-36ef5f39081474b4750e17f21e3e75a99e23b16fa969febeb180e410dc050e01

  • Size

    272KB

  • Sample

    240229-g2m4sagh73

  • MD5

    a372e2c179132dcb39954075d6c024df

  • SHA1

    a205f85fc3f62ed8dfc729ead922a37df01dadba

  • SHA256

    36ef5f39081474b4750e17f21e3e75a99e23b16fa969febeb180e410dc050e01

  • SHA512

    b8c162d9d071ce3b7f37919ad582236a000d4a5d0d93796be9b224bd73f58130c4e094f1f83148e63689e2a6884e01bbcae39edcfcc9adf548e3309eaab0f691

  • SSDEEP

    6144:FYm/Q7sxeVYAUByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6Mxv5R:EsxWYbByvNv54B9f01ZmHByvNv5

Score
10/10
persistence

Malware Config

Targets

    • Target

      Backdoor.Win32.Padodor.gen-36ef5f39081474b4750e17f21e3e75a99e23b16fa969febeb180e410dc050e01

    • Size

      272KB

    • MD5

      a372e2c179132dcb39954075d6c024df

    • SHA1

      a205f85fc3f62ed8dfc729ead922a37df01dadba

    • SHA256

      36ef5f39081474b4750e17f21e3e75a99e23b16fa969febeb180e410dc050e01

    • SHA512

      b8c162d9d071ce3b7f37919ad582236a000d4a5d0d93796be9b224bd73f58130c4e094f1f83148e63689e2a6884e01bbcae39edcfcc9adf548e3309eaab0f691

    • SSDEEP

      6144:FYm/Q7sxeVYAUByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6Mxv5R:EsxWYbByvNv54B9f01ZmHByvNv5

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks