Backdoor.Sinowal

Technical Information

File System Details

Backdoor.Sinowal creates the following file(s):
# File Name Size MD5 Detection Count
1 Torpig miniloader_2DACC4556FAD30027A384875C8D9D900.exe 238,080 2dacc4556fad30027a384875c8d9d900 1
2 1bc3b9a625767117244b1a3aecf6ff3257b99e2fca1a4f09ecd2cb16f68529c1.exe 241,664 a16c9f80d4a22232fa9fb6e27f95646e 0
3 1c86f5b3ae5788a0366a77b58d24f17d70e3c0373b436448d5b189cf7e890e20.exe 243,712 0b9b058f0c05498ed0df34400095d384 0
4 1de26b4a2cb157473bf60adb44b356d5d6ca87d3a0fd40a2f2fde5eb82324d15.exe 232,448 42bc3559d72be6bbcf2d3a098943c150 0
5 20b1567690749516c4dbc110403e04257694ace6f64b51a99cdc92a0cca0d6b4.exe 242,176 18e7b65e65b9c45df2d1fe93d4d61da6 0
6 21fc6dd32eb80b6d7d191cbbad61f9ef814de2c419311aae6268eab4cd8a0db6.exe 243,712 8e3136c7f7d3f1b95e635997788fbabb 0
7 Torpig miniloader_83419EEA712182C1054615E4EC7B8CBE.exe 247,808 83419eea712182c1054615e4ec7b8cbe 0
8 2ad926264f7407d39708d59d9317581796598f706526b6ca2a0456fa7fe0cd2f.exe 242,690 a564c081a0193e396c54b2d92cb9339b 0
9 313f6264a0b604ff5d05777f7383359f422c8a3df4b3fd51290b0626bcc1e681.exe 242,176 fa7ac63cf83a890b8c7e8c8792322b50 0
10 3f26f5ba635a070597cbe90ad2967431eceac530fecf0dc1bd13ba6a456feccd.exe 242,688 4f7e9d298faab7010e9665caac561e91 0
11 412e2e11b9782a27da0fa66229d0aacb71bc15128e993e77ca7cb5102a4127db.exe 248,832 cb03cdf8a88e95080b31e3658ae81d51 0
12 4b6bf95a7533ca5976e522e1456d54f4d9f1d207f25d3d840ef264773dbedb3b.exe 240,640 daa95d7c1c0849ddd5aa1e6d3042dd16 0
13 Torpig miniloader_87851480DEB151D3A0AA9A425FD74E61.exe 238,080 87851480deb151d3a0aa9a425fd74e61 0
14 Torpig miniloader_809910F29AA63913EFA76D00FA8C7C0B.exe 242,688 809910f29aa63913efa76d00fa8c7c0b 0
15 68ac02330b5db84a585dbb9cf262a5e08b6a4677b540bb99159517a6a2bce0eb.exe 238,592 9915f89bb254dc07c714aa9c49d2fbd2 0
16 6e50eb82f0511006c411866ad911340430b8acd8c6fa39552719ff72c13280b7.exe 243,200 f19b78f18399e6fded974f353a36ea96 0
17 Torpig miniloader_0F82964CF39056402EE2DE9193635B34.exe 242,688 0f82964cf39056402ee2de9193635b34 0
18 7eaf3197bb4faa3a020f6e6435cd7609898fc4663eb75e9ddf047570d0552690.exe 237,568 80ddf0a7f5b1180efee6c4329f06ad08 0
19 82bdaaa8e5ee3dcea5daef5b61b8398ce0dd20a756562746eb7a35b243d53c56.exe 243,200 3c468693b3c0d9ef2d1c14171536106d 0
20 Torpig miniloader_011C1CA6030EE091CE7C20CD3AAECFA0.exe 243,712 011c1ca6030ee091ce7c20cd3aaecfa0 0
21 9329afb4e8cc940c8c1f0a8bf168e7fc75316747171a5e0cb41043df20113933.exe 244,736 f8ef18458eb0ea591a7afaa50f167244 0
22 a9f9c874d68eec4ffefb2dbc83f5a5edde97a4e894064c5da922015e791c573c.exe 237,056 bc9d7f7a32d71186634ba2c24866e5fd 0
23 b58be916b455d1fda3bf7ce51cdf1b8f6ab83edaf643550025bfc46b37d52b71.exe 243,200 778bc5698dc348016b52b90d1fa888a8 0
24 b70b9f9f78bd82307955eb33aaf70d66640a44b3c7b3f591bf8be019ad231d3c.exe 244,736 ad9eb5b870a68dea079437268fcba7d7 0
25 c852402b1bc82842a7037bac7c2d0f37ebb084e0f6ba31ee5294a3ca6c55004f.exe 235,520 d5e6148d691a3277750d9c78f3b0ab71 0
26 c9d44c35dc86668349805b01539ab037aa8a16910920c2bde77aac6e99f4c5ab.exe 238,080 3a69991e3010bdce7b342f1dbefe0bfd 0
27 df350e17b9bc026ef5b4fcf8bbb1eb3debc1fb872d6064f76c48c6a5d57efde4.exe 236,544 3224b24814471bdf2abf53d3a13912ed 0
28 Torpig miniloader_C3366B6006ACC1F8DF875EAA114796F0.exe 249,344 c3366b6006acc1f8df875eaa114796f0 0
29 Torpig miniloader_4A3543E6771BC78D32AE46820AED1391.exe 241,152 4a3543e6771bc78d32ae46820aed1391 0

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.

By CagedTech in Backdoors
Threat Scorecard
?
The ESL Threat Scorecard is an assessment report that is given to every malware threat that has been collected and analyzed through our Malware Research Center. The ESL Threat Scorecard evaluates and ranks each threat by using several metrics such as trends, incidents and severity over time.

In addition to the effective scoring for each threat, we are able to interpret anonymous geographic data to list the top three countries infected with a particular threat. The data used for the ESL Threat Scorecard is updated daily and displayed based on trends for a 30-day period. The ESL Threat Scorecard is a useful tool for a wide array of computer users from end users seeking a solution to remove a particular threat or security experts pursuing analysis and research data on emerging threats.

Each of the fields listed on the ESL Threat Scorecard, containing a specific value, are as follows:

Ranking: The current ranking of a particular threat among all the other threats found on our malware research database.

Threat Level: The level of threat a particular computer threat could have on an infected computer. The threat level is based on a particular threat's behavior and other risk factors. We rate the threat level as low, medium or high. The different threat levels are discussed in the SpyHunter Risk Assessment Model.

Infected Computer: The number of confirmed and suspected cases of a particular threat detected on infected computers retrieved from diagnostic and scan log reports generated by SpyHunter's Spyware Scanner.

% Change: The daily percent change in the frequency of infected computers of a specific threat. The formula for percent changes results from current trends of a specific threat. An increase in the rankings of a specific threat yields a recalculation of the percentage of its recent gain. When a specific threat's ranking decreases, the percentage rate reflects its recent decline. For a specific threat remaining unchanged, the percent change remains in its current state. The % Change data is calculated and displayed in three different date ranges, in the last 24 hours, 7 days and 30 days. Next to the percentage change is the trend movement a specific malware threat does, either upward or downward, in the rankings. Each level of movement is color coded: a green up-arrow (∧) indicates a rise, a red down-arrow (∨) indicates a decline, and a brown equal symbol (=) indicates no change or plateaued.

Top 3 Countries Infected: Lists the top three countries a particular threat has targeted the most over the past month. This data allows computer users to track the geographic distribution of a particular threat throughout the world.
Ranking: N/A
Threat Level: 6
Infected Computers: 3