Benign Download

Backdoor.Win32.Delf.mm

Image list icon size importExecute shell command (ShellExecuteA)
SHA-25665cfddb34bffea5fe0c8969e651d790dc6247149988484acb5c2fdaf61d73c68
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x6a476–0x6a516
0x6a476654d65737361676500005472616e736ceMessage..Transl
0x6a4866174654d4449537973416363656c0000ateMDISysAccel..
0x6a496547261636b506f7075704d656e750000TrackPopupMenu..
0x6a4a653797374656d506172616d6574657273SystemParameters
0x6a4b6496e666f4100000053686f7757696e64InfoA...ShowWind
0x6a4c66f77000053686f775363726f6c6c4261ow..ShowScrollBa
⋯5 more rows
Query/set system parameters (symbol) 0x6b468–0x6b628
0x6b46800000000000000000000000000000000................
0x6b47800000000000000000000000000000000................
0x6b48800000000000000000000000000000000................
0x6b49800000000000000000000000000000000................
0x6b4a800000000000000000000000000000000................
⋯24 more rows
Execute shell command (ShellExecuteA) 0x6b63c–0x6b80c
⋯14 more rows
0x6b71c00000000000000000000000000000000................
0x6b72c00000000000000000000000000000000................
0x6b73c00000000000000000000000000000000................
0x6b74c00000000000000000000000000000000................
0x6b75c00000000000000000000000000000000................
0x6b76c00000000000000000000000000000000................
0x6b77c00000000000000000000000000000000................
0x6b78c00000000000000000000000000000000................
0x6b79c00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.