Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Backdoor.W...or.exe

windows7-x64

10

Backdoor.W...or.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Backdoor.Win32.Padodor.gen-8d173532285e7c07e393cb8cef8dea17451df025eede7325f64409ac1485ca74

  • Size

    192KB

  • Sample

    240229-hcamtsha8t

  • MD5

    c36b5388f3e926b75c25e21b4956d6c6

  • SHA1

    499a9d85660720e4d2db1d53f21c4b203cd426d3

  • SHA256

    8d173532285e7c07e393cb8cef8dea17451df025eede7325f64409ac1485ca74

  • SHA512

    d036c398690bc7db746451d938e5c88028f00f3b0bddaa55f88220c4df2f8281ce2535dbd2adbd53e28560c73afe03589834a9ccab994a447508793f3fd01807

  • SSDEEP

    3072:p0w1+uZ0WsXHZLITJP6w69is4Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6OzrR:pj50WGLsAw+isBOHhkym/89b0

Score
10/10
persistence

Malware Config

Targets

    • Target

      Backdoor.Win32.Padodor.gen-8d173532285e7c07e393cb8cef8dea17451df025eede7325f64409ac1485ca74

    • Size

      192KB

    • MD5

      c36b5388f3e926b75c25e21b4956d6c6

    • SHA1

      499a9d85660720e4d2db1d53f21c4b203cd426d3

    • SHA256

      8d173532285e7c07e393cb8cef8dea17451df025eede7325f64409ac1485ca74

    • SHA512

      d036c398690bc7db746451d938e5c88028f00f3b0bddaa55f88220c4df2f8281ce2535dbd2adbd53e28560c73afe03589834a9ccab994a447508793f3fd01807

    • SSDEEP

      3072:p0w1+uZ0WsXHZLITJP6w69is4Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6OzrR:pj50WGLsAw+isBOHhkym/89b0

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks