Pushdo
- First seen
- 2007-12-01 00:00:00
- Malware type
- downloader
- Family
- Malware family
- Profile updated
- 2026-07-07 12:57:33
Context
Pushdo is usually classified as a "downloader" trojan - meaning its true purpose is to download and install additional malicious software. There are dozens of downloader trojan families out there, but Pushdo is actually more sophisticated than most, but that sophistication lies in the Pushdo control server rather than the trojan.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Pushdo_Auto (yara-rule)
Related threat objects
- Pushdo (infrastructure)
Reports & references
- secureworks.com — Gold Essex (report)
- CrowdStrike — Report2021Gtr (report)
- shadowserver.org — Has The Sun Set On The Necurs Botnet (report)
- secureworks.com — Gold Essex (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Pushdo (report)
- malware-traffic-analysis.net — Index2 (report)
- trendmicro.de — Wp Study Of Pushdo Cutwail Botnet (report)
- secureworks.com — Pushdo (report)
- blueliv.com — Tracking The Footproints Of Pushdo Trojan (report)