Benign Download

Backdoor.Win32.Bifrose.bgw

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2560ea2155eae8ed8b596e837e8c51af511ad76996c03ee726c7f2d0891d706714e
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x929c4–0x92a64
0x929c46765000000005472616e736c6174654dge....TranslateM
0x929d44449537973416363656c000000005472DISysAccel....Tr
0x929e461636b506f7075704d656e7500000000ackPopupMenu....
0x929f453797374656d506172616d6574657273SystemParameters
0x92a04496e666f4100000053686f7757696e64InfoA...ShowWind
0x92a146f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x95538–0x95628
0x95538878f3338f33f000033334d5d0ffff433..38.?..33M]...3
0x9554833333388788f3338f33f0000333345d5333.x.38.?..33E.
0x955580fefe4333333338f878f3338f33f0000...3333...38.?..
0x9556833334d5d0ffff43333333388788f333833M]...3333.x.38
0x95578f33f0000333345d50fefe4333333338f.?..33E....3333.
⋯11 more rows
Execute shell command (ShellExecuteA) 0x95720–0x958f0
⋯13 more rows
0x957f033333333333333333888883333330000333333338..333..
0x9580028000000240000001200000001000400(...$...........
0x9581000000000680100000000000000000000....h...........
0x9582010000000000000000000000000008000................
0x9583000800000008080008000000080008000................
0x9584080800000c0c0c000808080000000ff00................
0x9585000ff000000ffff00ff000000ff00ff00................
0x95860ffff0000ffffff003444463333344443........4DF334DC
0x958703333ffff333333ffff33000033aaa43333..333..3..3..3
0x9588033332a4333338833f33333883f33000033*C33.3.33.?3..
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.