Hostile 92% Download

Backdoor.Win32.SdBot.ejp

Named SdBot backdoor

Sample from CN Honker Pentest Toolset - file Webshell.exe
SHA-2565e6174e358688f7b1be26fe5d7944f2a763140bcdeb9d3bd0f4ec978278709c2
MaleculeTh

Evidence

Sample from CN Honker Pentest Toolset - file Webshell.exe 0x5496–0x5636
⋯7 more rows
0x550664206973206e6f74207661696c642100d is not vaild!.
0x5516446f20796f752077616e7420746f2063Do you want to c
0x5526616e63656c207468652066696c652064ancel the file d
0x55366f776e6c6f61643f0d0a5761726e696eownload?..Warnin
0x5546673a204170706c69636174696f6e2063g: Application c
⋯15 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.