Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Backdoor.Win32.Padodor.SK.MTB-69f6d18da5f2c9081beb02200d45eb222fe25d537c7296676f47edbbb1d1f5d2N
-
Size
90KB
-
Sample
240916-tbq4zawemp
-
MD5
31eaba86e26b9765ed48c62cfc93a940
-
SHA1
d1414896ca3244f1aa92161702ccb86aeca49872
-
SHA256
69f6d18da5f2c9081beb02200d45eb222fe25d537c7296676f47edbbb1d1f5d2
-
SHA512
ed8c6bd6e9cd818f8c671e6e9af23802ca7f3d9957b360705e043df2c198ad0711a27d031ea4a9325eccd4a04073cd9ac67bb01e4c9ca3eccd195b1052887719
-
SSDEEP
1536:1yTEVRg0j1maQsrxDb/OxmnOVU8n5rQgOGhu/Ub0VkVNK:1yTqg0xmy1DYmC5rQgOGhu/Ub0+NK
Static task
static1
Behavioral task
behavioral1
Sample
Backdoor.Win32.Padodor.SK.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Backdoor.Win32.Padodor.SK.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
Backdoor.Win32.Padodor.SK.MTB-69f6d18da5f2c9081beb02200d45eb222fe25d537c7296676f47edbbb1d1f5d2N
-
Size
90KB
-
MD5
31eaba86e26b9765ed48c62cfc93a940
-
SHA1
d1414896ca3244f1aa92161702ccb86aeca49872
-
SHA256
69f6d18da5f2c9081beb02200d45eb222fe25d537c7296676f47edbbb1d1f5d2
-
SHA512
ed8c6bd6e9cd818f8c671e6e9af23802ca7f3d9957b360705e043df2c198ad0711a27d031ea4a9325eccd4a04073cd9ac67bb01e4c9ca3eccd195b1052887719
-
SSDEEP
1536:1yTEVRg0j1maQsrxDb/OxmnOVU8n5rQgOGhu/Ub0VkVNK:1yTqg0xmy1DYmC5rQgOGhu/Ub0+NK
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-