Benign Download

Trojan-Proxy.Win32.Mitglieder.cb

API Monitor process-name referenceCreateRemoteThread API reference
SHA-256a10f026cb39b8bd9250a452731597347a6856f805368559359536d4058d544ed
MaleculeO(Al)H(Po₂)

Evidence

CreateRemoteThread API string 0x1844–0x1914
⋯3 more rows
0x187400005365744c6173744572726f720000..SetLastError..
0x188443726561746552656d6f746554687265CreateRemoteThre
0x1894616400004372656174654d7574657841ad..CreateMutexA
0x18a4000043726561746546696c6541000000..CreateFileA...
⋯7 more rows
Embedded PE binary at file offset 0x1a26 (~24026 bytes) 0x19e6–0x1ab6
⋯3 more rows
0x1a1672794100467265654c69627261727900ryA.FreeLibrary.
0x1a264d5a00000100000002000000ffff0000MZ..............
0x1a3640000000000000004000000000000000@.......@.......
0x1a46b44ccd21000000000000000000000000.L.!............
⋯7 more rows
Execute shell command (ShellExecuteA) 0x2fc0–0x3130
⋯3 more rows
0x2ff00c8b126a0068e8030000ffb59cfeffff...j.h..........
0x3000ff750cff520c6a006a008d85b7feffff.u..R.j.j.......
0x301050ffb59cfeffff6a00e86c0e00000bc0P......j..l.....
⋯7 more rows
0x309000ff750ce8e8edffff8b550c8b126a00..u.......U...j.
0x30a06a048d858cfeffff50ff750cff520cffj.......P.u..R..
0x30b0750ce8ddedffff6a006a046a04ff750cu......j.j.j..u.
0x30c0ff7508e843f3ffff85c00f84c5000000.u..C...........
⋯7 more rows
API Monitor process-name reference 0x4d7e–0x4e9e
⋯5 more rows
0x4dce55532e45584500414e54532e45584500US.EXE.ANTS.EXE.
0x4dde4150494d4f4e49544f522e4558450041APIMONITOR.EXE.A
0x4dee504c49434133322e4558450041505658PLICA32.EXE.APVX
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.