Backdoor

What is “Backdoor:Win32/Padodor.SK!MTB”?

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?



File Info:

name: DC351B56AB15F1C5ACE8.mlw
path: /opt/CAPEv2/storage/binaries/cb7491ba56fce5d794860e4281e08e74bce1c6a96d9a0d27f9d93d913d92c323
crc32: 93C03C55
md5: dc351b56ab15f1c5ace8d0f4a4dccc80
sha1: 52e04cf11213848efb852893c114965cf50a8ced
sha256: cb7491ba56fce5d794860e4281e08e74bce1c6a96d9a0d27f9d93d913d92c323
sha512: 3073cbb2a3f4128becaa0fee374c61e056f7b710c3bc69c4c63aad424936e70ec562410b980c6e46a4096d6e0dddf7dbdd76e2965c6e5a8e411136a092eed911
ssdeep: 3072:HT4J+Oka2kDYFt8fo3PXl9Z7S/yCsKh2EzZA/z:zU+O7DYFtgo35e/yCthvUz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FDB38DFBA29C1F77C68102B2210F98AD7609D67832BB91B2182CC44F1F96D68533E5DD
sha3_384: 8630075eb6d559bd06bbd498d0cca21c17a989e93178ea61acc44cde33eb4f4560b1a14a05d93f37c35af2c5889a41df
ep_bytes: 90609090909067e80000000090905890
timestamp: 1980-09-26 05:39:38


Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.AB13442E.A.1AF49F8B
SkyhighBehavesLike.Win32.Generic.cc
McAfeeTrojan-FVOK!DC351B56AB15
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Padodor.Win32.936422
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderGeneric.Dacic.AB13442E.A.1AF49F8B
K7GWTrojan ( 005780dd1 )
K7AntiVirusTrojan ( 005780dd1 )
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32Win32/Padodor.AB
APEXMalicious
ClamAVWin.Trojan.Crypted-30
KasperskyBackdoor.Win32.Padodor.gen
AlibabaBackdoor:Win32/Padodor.8c6fb2e9
NANO-AntivirusTrojan.Win32.Padodor.ixeeyi
RisingBackdoor.Berbew!8.115 (TFE:2:OZNHsQD3f1G)
SophosTroj/Padodo-Gen
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebBackDoor.Wdozer
VIPREGeneric.Dacic.AB13442E.A.1AF49F8B
TrendMicroTROJ_GEN.R002C0DKD23
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.dc351b56ab15f1c5
EmsisoftGeneric.Dacic.AB13442E.A.1AF49F8B (B)
IkarusTrojan.Crypt
MAXmalware (ai score=88)
JiangminBackdoor.Padodor.dpzf
GoogleDetected
AviraTR/Crypt.ZPACK.Gen2
VaristW32/Backdoor.DKIC-2994
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Padodor.SK!MTB
ArcabitGeneric.Dacic.AB13442E.A.1AF49F8B
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataGeneric.Dacic.AB13442E.A.1AF49F8B
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
BitDefenderThetaAI:Packer.44E7344521
ALYacGeneric.Dacic.AB13442E.A.1AF49F8B
TACHYONBackdoor/W32.Padodor
DeepInstinctMALICIOUS
VBA32Backdoor.Padodor
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DKD23
TencentBackdoor.Win32.Padodor.kp
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:Padodor-V [Trj]
Cybereasonmalicious.112138
AvastWin32:Padodor-V [Trj]

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment