Benign Download

Trojan-GameThief.Win32.OnLineGames.apkw

Detects an XORed URL in an executable
SHA-2568ecec2d113e6f2fbe1a4cd0257d5151ccf5caccf41c944da0e3fe72673cdb073
MaleculeTh

Evidence

Detects an XORed URL in an executable 0x509c–0x515c
⋯3 more rows
0x50ccffff01c645fc00005068010050048b15....E...Ph..P...
0x50dc4f5353571d08084d5316095448524d4dOSSW...MS..THRMM
0x50ec4d4d0944484a0844444f4f084b4e4909MM.DHJ.DDOO.KNI.
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.