Skip to content

Malware

SoulSearcher

SoulSearcher is a second-stage loader responsible for executing the Soul backdoor main module and parsing its configuration.

SoulSearcher is a Windows malware family operated by SharpPanda.

Background

SoulSearcher acts as a second-stage loader whose job is to launch the main module of the Soul backdoor and interpret its configuration. Several variants exist, differing in where the payload and configuration reside as well as in the configuration format itself.


Source: Malpedia (Fraunhofer FKIE).