Benign Download

Backdoor.Win32.SnooperYB.b

Detour-style InstallHook helper name
SHA-2561145ff53f8726a2a148c3bf7638d6738cb22d99e7f07fc222a6dcfd1c687b140
MaleculeO(Er)

Evidence

Detour-style InstallHook helper name 0xce0d–0xcecd
⋯3 more rows
0xce3dce0000000073746477696e2e646c6c00.....stdwin.dll.
0xce4d496e7374616c6c486f6f6b0000000000InstallHook.....
0xce5d00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.