Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Backdoor.Win32.Padodor.SK.MTB-38bc297b575578ddeca9ab674c3dabd8a3f0c6e59027d3bc032f62083e57c8f1N
-
Size
89KB
-
Sample
240919-n3pgkaxfkq
-
MD5
d2ff24710d16434a78397e05df4a0080
-
SHA1
92ca3428a0f978a3cd28d8a81fc9c6056621134d
-
SHA256
38bc297b575578ddeca9ab674c3dabd8a3f0c6e59027d3bc032f62083e57c8f1
-
SHA512
dbc192f6e053cd0c795a577f0306089d6b71572d8e35bcc663edb4f648b69947a5cea999903baf88c42658b5596c87ebd7f09d739d074f93b23d0c55009463e1
-
SSDEEP
1536:otksuLhTAvIb7gsHnkyXrRuBAvBfRQ3zR+KRFR3RzR1URJrCiuiNj5QkMMWRklp/:oSl+AIGnkyXFuivBfejjb5ZXUf2iuOjH
Static task
static1
Behavioral task
behavioral1
Sample
Backdoor.Win32.Padodor.SK.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Backdoor.Win32.Padodor.SK.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://viruslist.com/wcmd.txt
http://viruslist.com/ppslog.php
http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
Backdoor.Win32.Padodor.SK.MTB-38bc297b575578ddeca9ab674c3dabd8a3f0c6e59027d3bc032f62083e57c8f1N
-
Size
89KB
-
MD5
d2ff24710d16434a78397e05df4a0080
-
SHA1
92ca3428a0f978a3cd28d8a81fc9c6056621134d
-
SHA256
38bc297b575578ddeca9ab674c3dabd8a3f0c6e59027d3bc032f62083e57c8f1
-
SHA512
dbc192f6e053cd0c795a577f0306089d6b71572d8e35bcc663edb4f648b69947a5cea999903baf88c42658b5596c87ebd7f09d739d074f93b23d0c55009463e1
-
SSDEEP
1536:otksuLhTAvIb7gsHnkyXrRuBAvBfRQ3zR+KRFR3RzR1URJrCiuiNj5QkMMWRklp/:oSl+AIGnkyXFuivBfejjb5ZXUf2iuOjH
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-