spyder | bf9445ded122ee5853bb45d69b390ed5a0b36baa0c48adc7a8fa65e526116720 | Triage™

Login
Reports

Overview

overview

Static

static

sub_bf9445ded122.exe

windows10-2004-x64

sub_bf9445ded122.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
sub_bf9445ded122.bin
Size 628KB
Sample260524-b4pshaes5n
SHA256 bf9445ded122ee5853bb45d69b390ed5a0b36baa0c48adc7a8fa65e526116720
MD5 3f8ee7eda499ad12f9072b8c9035acda
SHA1 7b1c1a17156709e9ae26d14f8797d3da51a34d0e
SHA512 cde38ab27c7faaad0e26ba49bc3b296828ccfb2b83f295ff61600cef6beb08f81f10578083c44843b6af2a702fa169b377510a24295aef3a1b1fb6512587cbf9
SSDEEP 12288:QXKLAXYIWHHHf29Pn0vmFmhZ8BZJfZPRRRR+KYC5jBJxsgRSd5m5Z7aFU8Ghay:iKequamIhZ8BZJfZPRRRRJYO1sj5m7vx
TLSH
T1A7D4AE00FB82CC72F4921634C5E1E7F9952C6D244B8099D7E39C7F6BB9302D25AF265A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

spyder patchwork apt backdoor discovery revoked_codesign

Static task

static1

4 signatures

revoked_codesign backdoor apt patchwork spyder

Behavioral task

behavioral1

Sample

sub_bf9445ded122.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

patchwork apt backdoor discovery spyder

Behavioral task

behavioral2

Sample

sub_bf9445ded122.exe

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

150 seconds

patchwork apt backdoor discovery spyder

Malware Config

Targets

- Target
  sub_bf9445ded122.bin
- Size 628KB
- SHA256 bf9445ded122ee5853bb45d69b390ed5a0b36baa0c48adc7a8fa65e526116720
- MD5 3f8ee7eda499ad12f9072b8c9035acda
- SHA1 7b1c1a17156709e9ae26d14f8797d3da51a34d0e
- SHA512 cde38ab27c7faaad0e26ba49bc3b296828ccfb2b83f295ff61600cef6beb08f81f10578083c44843b6af2a702fa169b377510a24295aef3a1b1fb6512587cbf9
- SSDEEP 12288:QXKLAXYIWHHHf29Pn0vmFmhZ8BZJfZPRRRR+KYC5jBJxsgRSd5m5Z7aFU8Ghay:iKequamIhZ8BZJfZPRRRRJYO1sj5m7vx
- TLSH
  T1A7D4AE00FB82CC72F4921634C5E1E7F9952C6D244B8099D7E39C7F6BB9302D25AF265A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

patchwork apt backdoor discovery spyder
- Detects Spyder backdoor
  backdoor apt patchwork
- Family: Spyder
  Spyder is a backdoor operated by the South Asian APT group Patchwork.
  backdoor spyder
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

revoked_codesignbackdooraptpatchworkspyder

behavioral1

patchworkaptbackdoordiscoveryspyder

behavioral2

patchworkaptbackdoordiscoveryspyder

© 2018-2026

Terms | Privacy