Benign Download

Trojan-GameThief.Win32.OnLineGames.bvo

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-2560f0decbae0a5a27d25ec6f10c04eeafd29295552b7edfbc49c9a38f4bd515367
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x41d0–0x42b0
⋯3 more rows
0x420000000000000000000000000000000000................
0x4210dcc0c0c48e9b9bd2cd869ac7dbc1dede................
0x4220dede9ad7dbd99bdeded2cd9bd8ddda9a................
0x4230d5c7c40025733f7372763d2573266964....%s?srv=%s&id
0x42403d257326703d257326733d2573267373=%s&p=%s&s=%s&ss
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.