Backdoor

Dropped:Backdoor.Padodor.BJ (B) (file analysis)

Malware Removal

The Dropped:Backdoor.Padodor.BJ (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Dropped:Backdoor.Padodor.BJ (B) virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family

How to determine Dropped:Backdoor.Padodor.BJ (B)?


File Info:

name: 34B094A50937C28FBC42.mlw
path: /opt/CAPEv2/storage/binaries/73c4809f33e5d2b877898539048c02062907d418ff6ccbf3a869585ec87cf6bc
crc32: BC3A1F97
md5: 34b094a50937c28fbc42fb2bb1396c43
sha1: 6f344de8e780487dd2e13686904a6ae7a8e9b70d
sha256: 73c4809f33e5d2b877898539048c02062907d418ff6ccbf3a869585ec87cf6bc
sha512: 0918b2ff7cf8a2c6cf6fbade771ad39bf4ea20bbde770c0c50154779a0d078eede07f646683812df9862174dac966dae8da948241b034ca7a480ffcfe790b2c3
ssdeep: 1536:7i4hMn6nKd+mmsp66zZmWfWpnfYjEgZrI1jHJZrR:Ny6nKdR3PfWhwEgu1jHJ9R
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E9836B6770294FB0C85B00B9256E6DD69B2E80764635F8C0F5C4CD5CE32B67AC3A8BB5
sha3_384: 2b5e38b09987f056bc736c99d049b6a8f278c9888c53af94c7923f65a2a9ddfeb23826486550760a31303b376811045d
ep_bytes: 90b8001040009090bb6c8f4000b99168
timestamp: 2014-05-31 22:06:51

Version Info:

0: [No Data]

Dropped:Backdoor.Padodor.BJ (B) also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Qukart.h!c
Elasticmalicious (high confidence)
MicroWorld-eScanDropped:Backdoor.Padodor.BJ
FireEyeGeneric.mg.34b094a50937c28f
CAT-QuickHealBackdoor.Berbew.A6.MUE
SkyhighBehavesLike.Win32.Generic.lh
McAfeeGenericRXVP-YB!34B094A50937
MalwarebytesGeneric.Malware.AI.DDS
VIPREDropped:Backdoor.Padodor.BJ
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 005780dd1 )
K7AntiVirusTrojan ( 005780dd1 )
BaiduWin32.Trojan-Spy.Quart.a
VirITWin32.Padodor.V
SymantecBackdoor.Berbew.F
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R03BC0CBN24
ClamAVWin.Malware.Convagent-10013337-0
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderDropped:Backdoor.Padodor.BJ
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Crypt.hag
TACHYONBackdoor/W32.Padodor
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.HangUp.43791
ZillyaTrojan.PadodorGen.Win32.1
TrendMicroTROJ_GEN.R03BC0CBN24
Trapminemalicious.high.ml.score
EmsisoftDropped:Backdoor.Padodor.BJ (B)
IkarusTrojan-Spy.Win32.Qukart
JiangminTrojanProxy.Qukart.hveo
GoogleDetected
AviraTR/Crypt.XDR.Gen
VaristW32/Kryptik.JEE.gen!Eldorado
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Berbew.AA!MTB
ArcabitBackdoor.Padodor.BJ
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
GDataWin32.Trojan.PSE.11RRK8R
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
BitDefenderThetaAI:Packer.FFE9BACD21
ALYacDropped:Backdoor.Padodor.BJ
MAXmalware (ai score=88)
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FBNK!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.50937c
DeepInstinctMALICIOUS
alibabacloudBackdoor:Multi/Viking.N

How to remove Dropped:Backdoor.Padodor.BJ (B)?

Dropped:Backdoor.Padodor.BJ (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment