Overview

overview

10

Static

static

3

Backdoor.W...or.exe

windows7-x64

10

Backdoor.W...or.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Backdoor.Win32.Padodor.gen-d66e2cb383553ded6aa70760c70befc55a2db76ef4f4ba6c610d19688a7c2cdc

  • Size

    320KB

  • Sample

    240229-hj38qahd3v

  • MD5

    a2c888ada1ea271c183897e9af2323b8

  • SHA1

    d3501677a3576bfa7e22d742b0e376214cca715a

  • SHA256

    d66e2cb383553ded6aa70760c70befc55a2db76ef4f4ba6c610d19688a7c2cdc

  • SHA512

    5da4d09788f5ef8e853bfe734f9ff19fe4ba0a4bff52bc5d2af70d106f68ef164db3e9eab0e4522c22d52cdee72a0c7576c8f75721a49321ca70f2d0d2edbed5

  • SSDEEP

    6144:PiH6rem5nG850LAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUaR/N4:aaresnflYJ07kE0KoFtw2gu9RxrBIUb2

Score
10/10
persistence

Malware Config

Targets

    • Target

      Backdoor.Win32.Padodor.gen-d66e2cb383553ded6aa70760c70befc55a2db76ef4f4ba6c610d19688a7c2cdc

    • Size

      320KB

    • MD5

      a2c888ada1ea271c183897e9af2323b8

    • SHA1

      d3501677a3576bfa7e22d742b0e376214cca715a

    • SHA256

      d66e2cb383553ded6aa70760c70befc55a2db76ef4f4ba6c610d19688a7c2cdc

    • SHA512

      5da4d09788f5ef8e853bfe734f9ff19fe4ba0a4bff52bc5d2af70d106f68ef164db3e9eab0e4522c22d52cdee72a0c7576c8f75721a49321ca70f2d0d2edbed5

    • SSDEEP

      6144:PiH6rem5nG850LAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUaR/N4:aaresnflYJ07kE0KoFtw2gu9RxrBIUb2

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks