Benign Download

Backdoor.Win32.Hupigon.drch

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256b7c8aaecfc81343cd369db102865c67049398d41a2052a97a48618c51953f8bf
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x7aa92–0x7ab32
0x7aa926765000000005472616e736c6174654dge....TranslateM
0x7aaa24449537973416363656c000000005472DISysAccel....Tr
0x7aab261636b506f7075704d656e7500000000ackPopupMenu....
0x7aac253797374656d506172616d6574657273SystemParameters
0x7aad2496e666f4100000053686f7757696e64InfoA...ShowWind
0x7aae26f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x7d5b8–0x7d6a8
0x7d5b883f0ffff81f8ffff10f87fff187c7fff.............|..
0x7d5c81c3c7fff1e1c7fff1f0c7fff0f847fff.<..............
0x7d5d88fc0ffff87e0ffffc1e1ffffe003ffff................
0x7d5e8f007fffffc1fffff2800000024000000........(...$...
0x7d5f812000000010004000000000000000000................
⋯11 more rows
Execute shell command (ShellExecuteA) 0x7d8b0–0x7d9e0
⋯3 more rows
0x7d8e024a22243338f3838f338f3338f330000$."C3.88.8.3.3..
0x7d8f0a2a333a2224a2224338f83338f338f33..3."J"$3..3.3.3
0x7d90038f300003a33333a2224a222433833338...:33:"$."C833
0x7d91038f338f3338f000033333333a2224a228.8.3...3333."J"
0x7d92043333333338f338f338f000033333333C3333.3.3...3333
0x7d9303a2224a2233333333338f338f8330000:"$.#33338.8.3..
0x7d9403333333333a2224a3333333333338f3333333."J333333.3
0x7d9508f33000033333333333a222433333333.3..33333:"$3333
0x7d960333338f338f30000333333333333a224338.8...333333.$
0x7d970333333333333338f38f30000333333333333333.8...3333
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.