Trojan-GameThief.Win32.Nilage.bq
Detects an XORed URL in an executableEncoded content decoded: xor
SHA-25644d206648d6dc7924dad8bc3e61c11b54d948f3f0f1c999632f89650685bb709
MaleculeMdTh
Evidence
⋯3 more rows
0x15b586959575300000000ffffffff4e000000iYWS........N...
0x15b68e8f4f4f0f3baafafe7e1f3e8aee7e1ed................
0x15b78e1eee9e1aee3efedafe7e1f3e8dfecef................
0x15b88e7e9eee6eff2edaee1f3f0bff5f3e5f2................
0x15b98dfecefe3e1f4e5bdafe7e8efede5afe8................
0x15ba8efede5dfe3e5eef4e5f2aee1f3f00000................
0x15bb8ffffffff33000000e8f4f4f0baafaff7....3...........
0x15bc8f7f7aee7e1ede1eee9e1aee3efedafe7................
0x15bd8e1f3e8dfecefe7e9eee6eff2edb1aee1................
0x15be8f3f0bfcde5f3f3e1e7e5bd00ffffffff................
0x15bf834000000e8f4f4f0baafafe7e1f3e8ae4...............
0x15c08e7e1ede1eee9e1aee3efedafe7e1f3e8................
0x15c18dfecefe7e9eee6eff2edb1aee1f3f0bf................
0x15c28cde5f3f3e1e7e5bd00000000ffffffff................
0x15c3826000000e8f4f4f0f3baafafe7e1f3e8&...............
0x15c48aee7e1ede1eee9e1aee3efedafeaefe9................
0x15c58eef7e9f4e8e7e1ede1af0000ffffffff................
0x15c6826000000e8f4f4f0f3baafafe7e1f3e8&...............
0x15c78aee7e1ede1eee9e1aee3efedafe7e1f3................
0x15c88e8e9eee4e5f8aee1f3f00000ffffffff................
0x15c9826000000e8f4f4f0f3baafafe7efefe4&...............
0x15ca8ecefe3ebaee7e1ede1eee9e1aee3efed................
0x15cb8afe9eee4e5f8aee1f3f00000ffffffff................
0x15cc82c000000e8f4f4f0baafaff7f7f7aee7,...............
0x15cd8e1ede1eee9e1aee3efedafe7e8efede5................
0x15ce8afe8efede5dfe3e5eef4e5f2aee1f3f0................
0x15cf800000000ffffffff17000000e8f4f4f0................
0x15d08baafaff7f7f7aee7e1ede1eee9e1aee3................
0x15d18efedaf00ffffffff16000000e8f4f4f0................
0x15d28baafaff7f7f7aee7e1ede1eee9e1aee3................
0x15d38efed0000ffffffff2f000000e8f4f4f0......../.......
0x15d48baafaff7f7f7aee7e1ede1eee9e1aee3................
0x15d58efedafe4e5e6e1f5ecf4aee1f3f0bff5................
0x15d68f3e5f2dfecefe3e1f4e5bd00ffffffff................
0x15d782c000000e8f4f4f0f3baafafe7e1f3e8,...............
⋯7 more rows