Malware analysis report on SparrowDoor malware
A technical analysis of a new variant of the SparrowDoor malware.
The NCSC malware analysis report on a variant of the SparrowDoor malware is available below, along with indicators of compromise, STIX and detection rules.
The report covers technical analysis of a variant of SparrowDoor reported by ESET in September 2021. The variant was found on a UK network in 2021 and contains additional functionality.
SparrowDoor is a persistent loader and backdoor which employs XOR encoding for the C2 channel underneath HTTPS. The additional functionality includes clipboard logging, AV detection, inline hooking of Windows API functions and token impersonation.
Downloads
- 515.42 KB
Malware Analysis Report SparrowDoor
This report covers technical analysis of a new variant of the SparrowDoor malware.
- Csv
- 1.55 KB
Malware Analysis Report SparrowDoor Indicators
- Txt
- 1.02 KB
Malware Analysis Report SparrowDoor Sigma
- Json
- 174.94 KB
Malware Analysis Report SparrowDoor STIX2.1
- Txt
- 6.01 KB
Malware Analysis Report SparrowDoor YARA