Benign Download

Backdoor.Win32.Buttman.09

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2567c47c642d1f6efdeca799571b0b72e3a594f8d44fab067cc3c9b0148ac520cfc
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x662c0–0x66360
0x662c0654d65737361676500005472616e736ceMessage..Transl
0x662d06174654d4449537973416363656c0000ateMDISysAccel..
0x662e0547261636b506f7075704d656e750000TrackPopupMenu..
0x662f053797374656d506172616d6574657273SystemParameters
0x66300496e666f4100000053686f7757696e64InfoA...ShowWind
0x663106f77000053686f774f776e6564506f70ow..ShowOwnedPop
⋯5 more rows
Execute shell command (ShellExecuteA) 0x68434–0x68724
0x6843400000000000000000000000000000000................
0x6844400000000000000000000000000000000................
0x6845400000000000000000000000000000000................
0x6846400000000000000000000000000000000................
0x6847400000000000000000000000000000000................
⋯36 more rows
0x686c400000000000000000000000000000000................
0x686d400000000000000000000000000000000................
0x686e400000000000000000000000000000000................
0x686f400000000000000000000000000000000................
⋯3 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.