Skip to content

Malware

BalkanDoor

According to ESET, BalkanDoor is a simple backdoor with a small number of commands (download and execute a file, create a remote shell, take a screenshot).

BalkanDoor is a Windows malware family.

Background

ESET characterizes BalkanDoor as a minimalist backdoor supporting only a handful of commands, such as downloading and running a file, opening a remote shell, and grabbing a screenshot. It lets operators automate actions on an infected machine or manage many compromised hosts simultaneously. Since 2016, ESET has tracked six versions of the backdoor with differing command sets.


Source: Malpedia (Fraunhofer FKIE).