Benign Download

Trojan.Win32.Katlogger

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256614ca135e2186310c23cb7ce0a7ff01bb09e729c9b4812c078affc2416cdb28c
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x641fb–0x6429b
0x641fb6765000000005472616e736c6174654dge....TranslateM
0x6420b4449537973416363656c000000005472DISysAccel....Tr
0x6421b61636b506f7075704d656e7500000000ackPopupMenu....
0x6422b53797374656d506172616d6574657273SystemParameters
0x6423b496e666f4100000053686f7757696e64InfoA...ShowWind
0x6424b6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x65470–0x65550
0x654700000000000f8090000000000008f9d2b...............+
0x654802c000000000000010000000000080a00,...............
0x6549000000000008f9d2b2c00000000000001.......+,.......
0x654a00000000000180a0000000000008f9d2b...............+
0x654b02c000000000000010000000000280a00,............(..
⋯10 more rows
Execute shell command (ShellExecuteA) 0x65644–0x65834
⋯15 more rows
0x65734008f9d2b2c0000000000000100000000...+,...........
0x6574400d80b0000000000008f9d2b2c000000...........+,...
0x65754000000010000000000e80b0000000000................
0x65764008f9d2b2c0000000000000100000000...+,...........
0x6577400f80b0000000000008f9d2b2c000000...........+,...
0x65784000000010000000000080c0000000000................
0x65794008f9d2b2c0000000000000100000000...+,...........
0x657a400180c0000000000008f9d2b2c000000...........+,...
0x657b4000000010000000000280c0000000000.........(......
0x657c4008f9d2b2c0000000000000100000000...+,...........
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.