Benign Download

Trojan-GameThief.Win32.WOW.bkg

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256986eddc303febcf0801de50458a3d1406296d1757342db4a65663152e0f2fa7a
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x400–0x4e0
⋯3 more rows
0x430696e323d2573266e616d653d25730000in2=%s&name=%s..
0x4400c1010145e4b4b1313134a0305090501....^KK...J.....
0x4500b4a070b094b0c1d4b080d0a4a051714.J...K..K...J...
0x46064626262626262626262626262626262dbbbbbbbbbbbbbbb
0x47062626262626262626262626262626262bbbbbbbbbbbbbbbb
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.