Benign Download

Backdoor.Win32.Hupigon.vbg

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256e1e7d1cb4d929c0e3e06206cf73a9d59d2ed96bca729db8cdd2013a8f46e236d
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0xa49c8–0xa4a68
0xa49c86765000000005472616e736c6174654dge....TranslateM
0xa49d84449537973416363656c000000005472DISysAccel....Tr
0xa49e861636b506f7075704d656e7500000000ackPopupMenu....
0xa49f853797374656d506172616d6574657273SystemParameters
0xa4a08496e666f4100000053686f7757696e64InfoA...ShowWind
0xa4a186f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0xa7638–0xa7728
0xa76386f34743479347f3486348c3493349934o4t4y4.4.4.4.4.4
0xa7648a034a634ad34b334ba34cc34dc34e434.4.4.4.4.4.4.4.4
0xa7658ec34f434fc3404350c3514351c352435.4.4.4.5.5.5.5$5
0xa76682c3534353c3544354c3554355c356435,545<5D5L5T5\5d5
0xa76786c3574357c3584358c3594359c35a435l5t5|5.5.5.5.5.5
⋯11 more rows
Execute shell command (ShellExecuteA) 0xa782c–0xa79fc
⋯13 more rows
0xa78fc343838383c384038443848384c3850384888<8@8D8H8L8P8
0xa790c5e387c3897389b38ac38bc38c838cc38^8|8.8.8.8.8.8.8
0xa791cd438d838dc38e038e438e838ec38f038.8.8.8.8.8.8.8.8
0xa792cf438f838fc380039043908390c391039.8.8.8.9.9.9.9.9
0xa793c14391e39223938394d39513964397039.9.9"989M9Q9d9p9
0xa794c7439803984398c399039943998399c39t9.9.9.9.9.9.9.9
0xa795ca039a439a839ac39b039b439b839bc39.9.9.9.9.9.9.9.9
0xa796cc039c439c839cc39d039d439e239f439.9.9.9.9.9.9.9.9
0xa797cf839fc39003a103a213a253a383a4d3a.9.9.:.:!:%:8:M:
0xa798c703a7c3a803a903a983a9c3aa03aa43ap:|:.:.:.:.:.:.:
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.