Benign Download

Backdoor.Win32.Delf.fm

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2564474eccecf20d9a7b249cc60ff01a87778384a7a440dacbeb0af2fb2c761dba6
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x8f1f2–0x8f292
0x8f1f26765000000005472616e736c6174654dge....TranslateM
0x8f2024449537973416363656c000000005472DISysAccel....Tr
0x8f21261636b506f7075704d656e7500000000ackPopupMenu....
0x8f22253797374656d506172616d6574657273SystemParameters
0x8f232496e666f4100000053686f7757696e64InfoA...ShowWind
0x8f2426f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x924ec–0x925dc
0x924ecb13dc43d6d3e9b3eb63e363f3b3f553f.=.=m>.>.>6?;?U?
0x924fc8f3f9d3f00f00100bc00000015304630.?.?.........0F0
0x9250c4d30a930343163311232543277325633M0.041c1.2T2w2V3
0x9251c77337b337f33833387338b338f339333w3{3.3.3.3.3.3.3
0x9252c97339b339f33a333a733ab33af33b333.3.3.3.3.3.3.3.3
⋯11 more rows
Execute shell command (ShellExecuteA) 0x926c4–0x928b4
⋯15 more rows
0x927b4c736003726372e374c3751375a376037.6.7&7.7L7Q7Z7`7
0x927c47537833789379437af37b737bd370e38u7.7.7.7.7.7.7.8
0x927d4273833383a3844385c38763880388a38'838:8D8\8v8.8.8
0x927e49438a338ad38bf38d738e338f038fc38.8.8.8.8.8.8.8.8
0x927f40f391b3925392c3936393d3947395439.9.9%9,969=9G9T9
0x9280464396c3974397c3984398c3994399c39d9l9t9|9.9.9.9.9
0x92814a439ac39b439bc39c439cc39d439dc39.9.9.9.9.9.9.9.9
0x92824e439ec39f439fc39043a0c3a143a1c3a.9.9.9.9.:.:.:.:
0x92834243a2c3a343a3c3a443a4c3a543a5c3a$:,:4:<:D:L:T:\:
0x92844643a6c3a743a7c3a843a8c3a943a9c3ad:l:t:|:.:.:.:.:
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.