Benign Download

Trojan-GameThief.Win32.OnLineGames.hyf

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-25621ebff6a1bddb74774dc82f32fc67e77fd6c547da0de24d19b40a9c87634a20f
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x550c–0x55ec
⋯3 more rows
0x553c97fcfb8afb83f98a8d8e8b8d89c70000................
0x554ce9f5fceeedfbe8ffe6f7d3d9c8d5c9d5................
0x555cdccee6edd3d4ded5cdc9e6f9cfc8c8df................
0x556cd4ceecdfc8c9d3d5d4e6ffc2cad6d5c8................
0x557cdfc8e6e9d2dfd6d6ffc2dfd9cfcedff2................
⋯7 more rows
Detects an XORed URL in an executable 0x5a2c–0x5aec
⋯3 more rows
0x5a5cffff01c645fc00005068010050048b15....E...Ph..P...
0x5a6c4a565652180d0d4856130c514d574848JVVR...HV..QMWHH
0x5a7c48480c414d4f0d41414a4a0d4e4b4c0cHH.AMO.AAJJ.NKL.
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.