Backdoor

About “Backdoor:Win32/Padodor.SK!MTB” infection

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • Uses Windows utilities for basic functionality
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?



File Info:

name: CEF63D9B8E7F7A38610E.mlw
path: /opt/CAPEv2/storage/binaries/30a6399514b0deaedeb7b48016a657b3d6b563cad7fa6bd047533a34fd56c5da
crc32: FDB51EDC
md5: cef63d9b8e7f7a38610e1a32cd0da930
sha1: cdc9d8d8b528713626ae6ba9e07762de3deab5c4
sha256: 30a6399514b0deaedeb7b48016a657b3d6b563cad7fa6bd047533a34fd56c5da
sha512: b7345e0878a3ba98a342769ea47cb9d56e32bcd736b6c88abb18743d7d694652a84caebc2f21969bc10c67dbda9a8dc1d49ffe30e6586c6b84f4288316324b0b
ssdeep: 1536:mGe5diRoTnfnCCMhb0yO0QeLKYFOzblm8ujDwETwU8BZNlRQhwR+KRFR3RzR1URb:mDdiGTCl3rEpujDzkbNleijb5ZXUf2ib
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T160936BEA31654EFADDC408F21C17C96B6B6CF1F9E229C5B0D061C01E2B37D289D7A952
sha3_384: f0b01eef76685a10eecce3c5a89b92d7ba0297f8072ef7085a5413215c381f2597ee5fd61706ac4b29263586f2b01f6d
ep_bytes: 90909090906067e80000000090905890
timestamp: 2020-07-11 03:39:59


Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGenPack:Trojan.Agent.DQQO
FireEyeGeneric.mg.cef63d9b8e7f7a38
SkyhighBehavesLike.Win32.Generic.mc
McAfeeGenericRXHD-SL!AEC0BAFB8D01
MalwarebytesPadodor.Backdoor.Bot.DDS
VIPREGenPack:Trojan.Agent.DQQO
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
BitDefenderGenPack:Trojan.Agent.DQQO
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.8b5287
BitDefenderThetaAI:Packer.B245410121
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32Win32/Padodor.NAM
APEXMalicious
ClamAVWin.Trojan.Crypted-31
KasperskyBackdoor.Win32.Padodor.gen
AlibabaBackdoor:Win32/Padodor.89ce8b5f
NANO-AntivirusTrojan.Win32.Padodor.flqian
RisingBackdoor.Berbew!1.AF13 (CLASSIC)
TACHYONBackdoor/W32.Padodor
SophosTroj/Padodor-M
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebBackDoor.HangUp.5
ZillyaTrojan.Padodor.Win32.1261645
TrendMicroTROJ_GEN.R03BC0DK723
Trapminemalicious.high.ml.score
EmsisoftGenPack:Trojan.Agent.DQQO (B)
IkarusBackdoor.Win32.Padodor
JiangminBackdoor.Padodor.mdl
GoogleDetected
AviraTR/Crypt.ZPACK.Gen2
VaristW32/Pahador.QLFO-8537
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Padodor.SK!MTB
ArcabitGenPack:Trojan.Agent.DQQO
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataGenPack:Trojan.Agent.DQQO
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32Backdoor.Padodor
ALYacGenPack:Trojan.Agent.DQQO
MAXmalware (ai score=83)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DK723
TencentBackdoor.Win32.Padodor.kp
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:BackdoorX-gen [Trj]
AvastWin32:BackdoorX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment