Hostile 92% Download

Trojan-GameThief.Win32.OnLineGames.acj

GameThief trojan with embedded PE

Detects Pirpi Backdoor - and other malware (generic rule)Embedded PE binary at file offset 0x1fd0 (~36864 bytes)
SHA-2561ec62c8608d75a643bb29b34d0ea9ea9dfb67d69253113c9bb5a6a51c40ec528
MaleculeTh

Evidence

Detects Pirpi Backdoor - and other malware (generic rule) 0x1b97–0x1d37
⋯7 more rows
0x1c07000000e2f9eb8251568b753c8b742e78.......QV.u<.t.x
0x1c1703f5568b762003f533c94941ad03c533..V.v ..3.IA...3
0x1c27db0fbe103ad67408c1cb0d03da40ebf1....:.t......@..
0x1c373b1f75e75e8b5e2403dd668b0c4b8b5e;.u.^.^$..f..K.^
0x1c471c03dd8b048b03c5ab5e59c35159c3e8.........^Y.QY..
⋯15 more rows
Embedded PE binary at file offset 0x1fd0 (~36864 bytes) 0x1f90–0x2060
⋯3 more rows
0x1fc08ffcffff61e889fcffffe884fcffffc3....a...........
0x1fd04d5a90000300000004000000ffff0000MZ..............
0x1fe0b8000000000000004000000000000000........@.......
0x1ff000000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.