Trojan-GameThief.Win32.Magania.zmd
Game thief trojan with RAT
Chinese Hacktool Set - file IISPutScannesr.exeDetects Gh0st RAT mentioned in Cylance' Ghost Dragon Report
SHA-256222e7943013d137362b105850fc35eebc701ea40c5138e63a783262a5e6eb2d5
MaleculeMdTh
Evidence
⋯7 more rows
0x2442a2a2a2a2a2a2a2a2a2a2a2a20d3c920************ ..
0x254796f64612026204d2e6f2e442e20d6c6yoda & M.o.D. ..
0x264d7f720b2dcb4cfbababbafb5c4205045.. .......... PE
0x2746469746f7220312e3720d0deb8c4202dditor 1.7 .... -
0x2843e20636f6d652e746f2f663266202a2a> come.to/f2f **
0x2942a2a2a2a2a2a2a2a2a2a2a2a00000000************....
0x2a400000000000000000000000000000000................
⋯15 more rows
⋯3 more rows
0x265000000000000000000300420049004e00..........B.I.N.
0x26604d5a90000300000004000000ffff0000MZ..............
0x2670b8000000000000004000000000000000........@.......
0x268000000000000000000000000000000000................
⋯7 more rows
⋯7 more rows
0x16c5c53746172740000005479706500000000Start...Type....
0x16c6c52656753657456616c75654578287374RegSetValueEx(st
0x16c7c61727429000000004572726f72436f6eart)....ErrorCon
0x16c8c74726f6c000000004f626a6563744e61trol....ObjectNa
⋯15 more rows
⋯3 more rows
0x16e0c722e64617400000025642e62616b0000r.dat...%d.bak..
0x16e1c0d0a5b253032642f253032642f256420..[%02d/%02d/%d
0x16e2c253032643a253032643a253032645d20%02d:%02d:%02d]
0x16e3c282573290d0a00005d0000000d0a0000(%s)....].......
⋯18 more rows
0x1b734457800b7014c6f6164437572736f7241Ex...LoadCursorA
0x1b74400950044657374726f79437572736f72...DestroyCursor
0x1b754000e00426c6f636b496e707574009902...BlockInput...
0x1b76453797374656d506172616d6574657273SystemParameters
0x1b774496e666f41003b0253656e644d657373InfoA.;.SendMess
0x1b7846167654100d6026b657962645f657665ageA...keybd_eve
⋯5 more rows