Overview

overview

10

Static

static

3

Backdoor.W...or.exe

windows7-x64

10

Backdoor.W...or.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Backdoor.Win32.Padodor.gen-c7969fb169f7eb3724f92622a5afc0d33a0c48ba6090e73a84f5ddc297b06386

  • Size

    104KB

  • Sample

    240229-hhpc6she57

  • MD5

    05753ad259cd707414ec61dd4122b1f1

  • SHA1

    4c098df57d14a621eee039777f7bf296efe60ea2

  • SHA256

    c7969fb169f7eb3724f92622a5afc0d33a0c48ba6090e73a84f5ddc297b06386

  • SHA512

    fc52a30e994d4d05a95666f190e241fc13246b7eda7be861a54fceec30b06e1378a36d563114ca307f9bcfd079a94a4cd1196eefa027c7906973a2d0b665da8b

  • SSDEEP

    3072:LspvMiyP5eIMGrJDfU8vJe5Zx7cEGrhkngpDvchkqbAIQS:Qt+8IMsU8k5Zx4brq2Ahn

Score
10/10
persistence

Malware Config

Targets

    • Target

      Backdoor.Win32.Padodor.gen-c7969fb169f7eb3724f92622a5afc0d33a0c48ba6090e73a84f5ddc297b06386

    • Size

      104KB

    • MD5

      05753ad259cd707414ec61dd4122b1f1

    • SHA1

      4c098df57d14a621eee039777f7bf296efe60ea2

    • SHA256

      c7969fb169f7eb3724f92622a5afc0d33a0c48ba6090e73a84f5ddc297b06386

    • SHA512

      fc52a30e994d4d05a95666f190e241fc13246b7eda7be861a54fceec30b06e1378a36d563114ca307f9bcfd079a94a4cd1196eefa027c7906973a2d0b665da8b

    • SSDEEP

      3072:LspvMiyP5eIMGrJDfU8vJe5Zx7cEGrhkngpDvchkqbAIQS:Qt+8IMsU8k5Zx4brq2Ahn

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks