Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Backdoor.W...or.exe

windows7-x64

10

Backdoor.W...or.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Backdoor.Win32.Padodor.gen-e55128b904780650d0682cb604285f2a3e6f20cb18c04d9a4e0f56a502355965

  • Size

    276KB

  • Sample

    240229-hlqqeahd8s

  • MD5

    cd227bfb086cda96cf9efd8442288c9d

  • SHA1

    ea736e1e04d811265a8dffe2eb16f8738494b6d0

  • SHA256

    e55128b904780650d0682cb604285f2a3e6f20cb18c04d9a4e0f56a502355965

  • SHA512

    00980477acd12d6b2150a582d35f512d9444fca884671b38f21c07806bd2cbaef12a6a685b63dd453906e9396af440ffda14324b2bc115468cb45e294e9e9f53

  • SSDEEP

    6144:YoT3oQzJA1YrdWZHEFJ7aWN1rtMsQBOSGaF+:DdUg2HEGWN1RMs1S7

Score
10/10
persistence

Malware Config

Targets

    • Target

      Backdoor.Win32.Padodor.gen-e55128b904780650d0682cb604285f2a3e6f20cb18c04d9a4e0f56a502355965

    • Size

      276KB

    • MD5

      cd227bfb086cda96cf9efd8442288c9d

    • SHA1

      ea736e1e04d811265a8dffe2eb16f8738494b6d0

    • SHA256

      e55128b904780650d0682cb604285f2a3e6f20cb18c04d9a4e0f56a502355965

    • SHA512

      00980477acd12d6b2150a582d35f512d9444fca884671b38f21c07806bd2cbaef12a6a685b63dd453906e9396af440ffda14324b2bc115468cb45e294e9e9f53

    • SSDEEP

      6144:YoT3oQzJA1YrdWZHEFJ7aWN1rtMsQBOSGaF+:DdUg2HEGWN1RMs1S7

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks