PULSE NAME
Squidoor Backdoor Malware Exploits IIS Servers for Stealthy Attacks
WHITE Superpro 2025-03-13 Modified: 2025-04-12
72
IOCs
HIGH VOLUME
A highly advanced backdoor malware, dubbed "Squidoor," is being used by suspected Chinese threat actors to target organizations in South America and Southeast Asia. The malware is designed for stealth and persistence, enabling attackers to maintain access to compromised networks while evading detection.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Chinese Windows Squidoor
Indicators of Compromise (72)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0054fd52962e55348f16cccaa6c12902 MD5 of f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d 2025-03-13
FileHash-MD5 137d011c50c2578836f4a59799d3629a MD5 of fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b 2025-03-13
FileHash-MD5 1635684e729cfa8911a6fec5448a1375 MD5 of 8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029 2025-03-13
FileHash-MD5 2068e64420fd0b795468be1387c297b3 MD5 of 7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970 2025-03-13
FileHash-MD5 2183043b19f4707f987d874ce44389e3 MD5 of 9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096 2025-03-13
FileHash-MD5 2d2a7143b84ec26099194177dba2634b MD5 of 2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f 2025-03-13
FileHash-MD5 4169cb0aa79415d4551da784985a8eb5 MD5 of 265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5 2025-03-13
FileHash-MD5 53671432705d39d498d76e12b7f951ab MD5 of c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a 2025-03-13
FileHash-MD5 60304f5caa5bea45c9c1a2b64459e181 MD5 of a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156 2025-03-13
FileHash-MD5 6057970ba67adc95615ca6992b40caee MD5 of 1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850 2025-03-13
FileHash-MD5 764a838236f5dceb3d199059ad36311e MD5 of 83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c 2025-03-13
FileHash-MD5 79dc740c79a2db26a72506320f279cc0 MD5 of 945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865 2025-03-13
FileHash-MD5 7c47d39edbd2e7f151832afcdbfb5e5a MD5 of 5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0 2025-03-13
FileHash-MD5 882f993729aad21ab7aa76ee722878d7 MD5 of 461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc 2025-03-13
FileHash-MD5 9553245740aaf385962de853aa840c31 MD5 of 82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a 2025-03-13
FileHash-MD5 a5cd9131a66f4ff2656a6deea1311b42 MD5 of e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad 2025-03-13
FileHash-MD5 a9d0f588f1b0f88c5a5036bc5bf2e09e MD5 of f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9 2025-03-13
FileHash-MD5 af247027f1389cb2530459e2c20f4354 MD5 of 224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727 2025-03-13
FileHash-MD5 bf0d870537d73f6a7f02112ce9378d52 MD5 of 6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c 2025-03-13
FileHash-MD5 e312ab7486260d546825626c60e85b6f MD5 of 3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381 2025-03-13
FileHash-MD5 f471067beaaa297e056e71a806655777 MD5 of 33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192 2025-03-13
FileHash-MD5 f71ee8038075e4765b063747633aced3 MD5 of 81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4 2025-03-13
FileHash-SHA1 0568da6b347f8d516fa7d1736dfe52d58a04035e SHA1 of 5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0 2025-03-13
FileHash-SHA1 24280ef3dcb50030f25d1ee25ed1b6a46a954ebd SHA1 of 461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc 2025-03-13
FileHash-SHA1 251e40bf251cbfd570cd860ee94fa3bd8c059c60 SHA1 of e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad 2025-03-13
FileHash-SHA1 2533b1cfa31203274884424245d560317573894b SHA1 of 82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a 2025-03-13
FileHash-SHA1 2fdea656bf50277c8d728e1a005bf1e5157c68d0 SHA1 of 83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c 2025-03-13
FileHash-SHA1 341acd75b8461d16e2fd8dc81c960f947e1f8049 SHA1 of a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156 2025-03-13
FileHash-SHA1 584dcb6cb4cd27c708522054360a21bd6cc5fd56 SHA1 of 33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192 2025-03-13
FileHash-SHA1 5accf8548a04c1e57003cde1a991bd6a7922c184 SHA1 of c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a 2025-03-13
FileHash-SHA1 70873dd47a47f23c28615e506e37cfa65e4618e1 SHA1 of 81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4 2025-03-13
FileHash-SHA1 7369aed60e1e475846c71fa447387a8930e5052e SHA1 of 945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865 2025-03-13
FileHash-SHA1 7476845bcca5a011d5db68feb1c22a8ef85e4ca0 SHA1 of 7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970 2025-03-13
FileHash-SHA1 7c53f9ee55b36720c7765f113bf8a762b02c9fbd SHA1 of 265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5 2025-03-13
FileHash-SHA1 7e2366cf665c602237e988954700cd48859fb197 SHA1 of 3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381 2025-03-13
FileHash-SHA1 7e759f1288525edce21c291ef12b8e8502514226 SHA1 of 6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c 2025-03-13
FileHash-SHA1 9386457f78de0eddde33cf759e82a083bf9cf4fa SHA1 of 1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850 2025-03-13
FileHash-SHA1 a1376a0760c0c327c2ff370cecdf755dfa53eca5 SHA1 of f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9 2025-03-13
FileHash-SHA1 a855de6a020701d865b158ebe2032a400587d959 SHA1 of 224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727 2025-03-13
FileHash-SHA1 a8da815722f34005131b6c3a796e455e8a9c7a8d SHA1 of f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d 2025-03-13
FileHash-SHA1 b18c63b284a02906e70c7e619cec03b1a4f89768 SHA1 of 2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f 2025-03-13
FileHash-SHA1 c26275023472688df90193612e33a3cc919f10e7 SHA1 of fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b 2025-03-13
FileHash-SHA1 e056d93490fc1c8a07745930e763611989eda674 SHA1 of 8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029 2025-03-13
FileHash-SHA1 f26028851f3b6f81c915ee1243173434fad86172 SHA1 of 9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096 2025-03-13
FileHash-SHA256 1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850 2025-03-13
FileHash-SHA256 224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727 2025-03-13
FileHash-SHA256 265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5 2025-03-13
FileHash-SHA256 2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f 2025-03-13
FileHash-SHA256 33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192 2025-03-13
FileHash-SHA256 3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381 2025-03-13
FileHash-SHA256 461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc 2025-03-13
FileHash-SHA256 5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0 2025-03-13
FileHash-SHA256 6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c 2025-03-13
FileHash-SHA256 7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970 2025-03-13
FileHash-SHA256 8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029 2025-03-13
FileHash-SHA256 81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4 2025-03-13
FileHash-SHA256 82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a 2025-03-13
FileHash-SHA256 83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c 2025-03-13
FileHash-SHA256 945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865 2025-03-13
FileHash-SHA256 9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096 2025-03-13
FileHash-SHA256 a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156 2025-03-13
FileHash-SHA256 c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a 2025-03-13
FileHash-SHA256 e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad 2025-03-13
FileHash-SHA256 f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9 2025-03-13
FileHash-SHA256 f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d 2025-03-13
FileHash-SHA256 fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b 2025-03-13
domain bashupload.com 2025-03-13
domain microsoft-beta.com 2025-03-13
domain microsoftapimap.com 2025-03-13
domain zimbra-beta.info 2025-03-13
hostname support.vmphere.com 2025-03-13
hostname update.hobiter.com 2025-03-13