Benign Download

Backdoor.Win32.Agent.itu

Image list icon size importExecute shell command (ShellExecuteA)
SHA-25640107df145a734cbf56eec9bad405cbfde6e98c35e024372b1d12352b497f78f
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x89940–0x899e0
0x899406765000000005472616e736c6174654dge....TranslateM
0x899504449537973416363656c000000005472DISysAccel....Tr
0x8996061636b506f7075704d656e7500000000ackPopupMenu....
0x8997053797374656d506172616d6574657273SystemParameters
0x89980496e666f4100000053686f7757696e64InfoA...ShowWind
0x899906f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x8a4b0–0x8a5a0
0x8a4b04c65617665000000496d6167654c6973Leave...ImageLis
0x8a4c0745f44726167456e746572000000496dt_DragEnter...Im
0x8a4d06167654c6973745f456e644472616700ageList_EndDrag.
0x8a4e00000496d6167654c6973745f42656769..ImageList_Begi
0x8a4f06e44726167000000496d6167654c6973nDrag...ImageLis
⋯11 more rows
Execute shell command (ShellExecuteA) 0x8a5d8–0x8a858
⋯25 more rows
0x8a768676574736f636b6f7074000000006765getsockopt....ge
0x8a77874706565726e616d65000000636f6e6etpeername...conn
0x8a788656374000000636c6f7365736f636b65ect...closesocke
0x8a7987400000062696e640000000061636365t...bind....acce
0x8a7a87074000077696e6d6d2e646c6c000000pt..winmm.dll...
0x8a7b874696d6547657454696d650000000000timeGetTime.....
0x8a7c800000000000000000000000000000000................
0x8a7d800000000000000000000000000000000................
0x8a7e800000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.