Virus.Hijack_Dropped.Backdoor.Padodor.BJ_483.vir
Padodor backdoor with embedded payloads
Berbew/Karton card-phishing backdoor identityCard-verification phishing prompt set
SHA-2562f74e5b9153b8aeb8a27f7a1344b288eaf0e84994f5a85e371a8aac9901dd78a
Evidence
⋯5 more rows
0x3f000000000400000400000000000000000....@..@........
0x400748fb7e6096bf39a044bf16d454f8362t....k...K.mEO.b
0x410ce0bd365ce1bd37dcc4d4f6e454ff7ae...e...}.MOnEO..
0x4201619a0e6016be73d2fb19f6d550ff709.....k.=/..mU...
0x430ba7af76d454f93e4604ff76d45c4b349.z.mEO..`O.mE..I
⋯34 more rows
⋯7 more rows
0xabf40a42881e0a42881e0a42881e0a42881e.B...B...B...B..
0xac045e2ae16d2a09cd494662db4a5f04ce3e^*.m*..IFb.J_..>
0xac147d23fb3e692dec7b6e62ea672a14a63e}#.>i-.{nb.g*..>
0xac245c6ca84e5f12c357446ea8736526ed6c\l.N_..WDn.se&.l
0xac346b36e76c2a2dee3e6930fd6a6532a670k6.l*-.>i0.je2.p
0xac447f42df7b6621e7736f62fc712a2dfd6c.B.{f!.sob.q*-.l
0xac542a24e76c7f2fa43e4b26fd727e62df7b*$.l./.>K&.r~b.{
0xac646862c57f7936ed6c7963a8767e36f824hb..y6.lyc.v~6.$
0xac74256deb6c7f36e76e242cfd1e4b15c532%m.l.6.n$,..K..2
0xac842a35ed72692de57b2a36e73e4910dd4a*5.ri-.{*6.>I..J
0xac944512a6505f62a53e4203da5a490dda5bE..P_b.>B..ZI..[
0xaca42501c7505e07c64a2501c0574606a84e%..P^..J%..WF..N
0xacb44510c651250ec7524316c94d2510c94eE..Q%..RC..M%..N
0xacc44f42da5b4b0ea85d4b11c0322a10cd5fOB.[K..]K..2*.._
0xacd44662ca575e01c05b5062a53e4910dd4aFb.W^..[Pb.>I..J
0xace44512a6505f42881e0a42c170692dfa6cE..P_B...B.pi-.l
0xacf46f21fc3e4b16c53e5a0bc6322a32e47bo!.>K..>Z..2*2.{
0xad046b31ed322a21e76c7827eb6a0a12e47bk1.2*!.lx'.j...{
0xad146b31ed322a27e66a6f30a8676537fa3ek1.2*'.jo0.ge7.>
0xad244b16c53e5a0bc61e432ceb717830ed7dK..>Z...C,.qx0.}
0xad347e62cb485c70a836396fec776d2bfc3e~b.H\p.69o.wm+.>
0xad44692dec7b2a2de63e6823eb752a2dee3ei-.{*-.>h#.u*-.>
0xad546923fa7a236ea86e6627e96d6f6ea87di#.z#n.nf'.mon.}
0xad646530fa7b6936884e6627e96d6f6ea87be0.{i6.Nf'.mon.{
0xad746436ed6c2a3be76b7862cb485c70a836d6.l*;.kxb.H\p.6
0xad84396fec776d2bfc3e692dec7b2a2de63e9o.wm+.>i-.{*-.>
0xad946823eb752a2dee3e6923fa7a2342ad6dh#.u*-.>i#.z#B.m
0xada42767fb1e5a2eed7f7927a43e7927e47b'g..Z...y'.>y'.{
⋯4 more rows
0xadf46e62c66b6720ed6c2662f8726f23fb7bnb.kg .l&b.ro#.{
0xae042662eb717830ed7d7e42d8726f23fb7b&b.qx0.}~B.ro#.{
0xae142662ed707e27fa3e732dfd6c2a01e96c&b.p~'.>s-.l*..l
0xae246e62c66b6720ed6c0a67fb3e2f31884enb.kg .l.g.>/1.N
0xae346627e96d6f6ea87b6436ed6c2a21e76cf'.mon.{d6.l*!.l
0xae447827eb6a2a04fd726662c67f6727884ex'.j*..rfb..g'.N
0xae546627e96d6f6ea86d6f2eed7d7e62cb7ff'.mon.mo..}~b..
0xae647826a8365c2bfb7f250fe96d7e27fa5dx&.6\+..%..m~'.]
0xae746b30ec370a24fa733842da7b6d2bfb6ak0.7.$.s8B.{m+.j
⋯7 more rows
0xb55c2f21ad7d0a20e4776426d76b7927fa1e/!.}. .wd&.ky'..
0xb56c5d27ea3e4f34ed707e62c4716d25ed6c]'.>O4.p~b.qm%.l
0xb57c0a11e7787e35e96c6f1ec5776930e76d...x~5.lo..wi0.m
0xb58c6524fc425d2be67a6535fb424937fa6ce$.B]+.ze5.BI7.l
0xb59c6f2cfc486f30fb77652cd44d6227e472o,.Ho0.we,.Mb'.r
0xb5ac5927fa686321ed516828ed7d7e06ed72Y'.hc!.Qh(.}~..r
0xb5bc6b3bc4716b26885f7a23fa6a6727e66ak;.qk&._z#.jg'.j
0xb5cc0a16e06c6f23ec776425c5716e27e41e...lo#.wd%.qn'..
0xb5dc0a01c44d4306d43b791ec1705a30e77d...MC..;y..pZ0.}
0xb5ec5927fa686f30bb2c0a67fb422f31a67aY'.ho0.,.g.B/1.z
0xb5fc662e88653d7bce5b4b01ce582704ce5df..e={.[K..X'..]
0xb60c4f6fb02f3f07a55f3372b8333973be2cOo./?.._3r.39s.,
0xb61c3372ca2b4875bb267742821e0016d04a3r.+Hu.&wB.....J
0xb62c3062af3b796582140a67b82c526288560b.;ye...g.,Rb.V
⋯15 more rows
⋯10 more rows
0xc30a476574557365724e616d654100007101GetUserNameA..q.
0xc31a5265674372656174654b657945784100RegCreateKeyExA.
0xc32a00007401526567436c6f73654b657900..t.RegCloseKey.
0xc33a000079015265674f70656e4b65794578..y.RegOpenKeyEx
0xc34a41008401526567517565727956616c75A...RegQueryValu
0xc35a65457841000090015265675365745661eExA....RegSetVa
0xc36a6c756545784100000000ca0147657453lueExA......GetS
0xc37a65637572697479496e666f000000cd01ecurityInfo.....
⋯10 more rows
⋯5 more rows
0x312bc00000000000000000000000000000000................
0x312cc00000000000000000000000000000000................
0x312dc00000000000000000000000000000000................
0x312ec00000000000000000000000000000000................
0x312fc00000000000000000000000000000000................
0x3130c00000000000000000000000000000000................
0x3131c00000000000000000000000000000000................
0x3132c00000000000000000000000000000000................
0x3133c00000000000000000000000000000000................
0x3134c00000000000000000000000000000000................
0x3135c00000000000000000000000000000000................
0x3136c00000000000000000000000000000000................
0x3137c00000000000000000000000000000000................
0x3138c00000000000000000000000000000000................
0x3139c00000000000000000000000000000000................
0x313ac00000000000000000000000000000000................
0x313bc00000000000000000000000000000000................
0x313cc00000000000000000000000000000000................
0x313dc00000000000000000000000000000000................
0x313ec00000000000000000000000000000000................
0x313fc00000000000000000000000000000000................
0x3140c00000000000000000000000000000000................
0x3141c00000000000000000000000000000000................
0x3142c00000000000000000000000000000000................
0x3143c00000000000000000000000000000000................
0x3144c00000000000000000000000000000000................
0x3145c00000000000000000000000000000000................
0x3146c00000000000000000000000000000000................
0x3147c00000000000000000000000000000000................
⋯12 more rows