Benign Download

Backdoor.Win32.Hupigon.dakr

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256653c2c0ff2b040158f9296e1870326bbb2605cfd2c75716296f668edde2aee0f
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0xa27de–0xa287e
0xa27de6765000000005472616e736c6174654dge....TranslateM
0xa27ee4449537973416363656c000000005472DISysAccel....Tr
0xa27fe61636b506f7075704d656e7500000000ackPopupMenu....
0xa280e53797374656d506172616d6574657273SystemParameters
0xa281e496e666f4100000053686f7757696e64InfoA...ShowWind
0xa282e6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0xa6640–0xa6730
0xa6640cc000cc000000000000000000cc000cc................
0xa665000000000000000000000000000000000................
0xa666000000000000000000000000000000000................
0xa667000000000000000000000000000000000................
0xa6680fffffffff5ffffafd5ffffab55e3c0aa............U...
⋯11 more rows
Execute shell command (ShellExecuteA) 0xa6838–0xa6a08
⋯13 more rows
0xa6908fde9da00feebdd00fdede100f8e8dc00................
0xa6918fdefe500fff2e800fef1e7005d483700............]H7.
0xa6928bb937100e3ba9700fad1ae00edc6a700..q.............
0xa6938f9d2b100fad3b300e6c2a500fad4b500................
0xa6948fad5b600f9d4b600fad5b800f9d5b800................
0xa6958f7d4b700fad7ba00fad8bc00fad9be00................
0xa6968fbdfc800fce1cb00fae1cd00fce3cf00................
0xa6978fde5d200fbe4d100fce7d600fdf2e900................
0xa6988fbf1e900fffaf6004b392900c69a7200........K9)...r.
0xa69986d564200dcb38e00eac4a200f5d1b200mVB.............
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.