Benign Download

Backdoor.Win32.Coldfusion.b

CreateRemoteThread API referenceEnumerate network resource entries import
SHA-2567461029a8616f5bbe1a072e24f7bfdf58a77bc12a8eb85bc960d6e9c77fb25f5

Evidence

CreateRemoteThread API string 0x103ce–0x1049e
⋯3 more rows
0x103fe43726561746554687265616400000000CreateThread....
0x1040e43726561746552656d6f746554687265CreateRemoteThre
0x1041e6164000000004372656174654d757465ad....CreateMute
0x1042e78410000000043726561746546696c65xA....CreateFile
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.