Benign Download

Trojan-GameThief.Win32.OnLineGames.xyo

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256ba7a3d0c3c6add4ed2ab825cdb1db6f917827e6bd00c426166277ba03eeaa82e
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x1fcc–0x21ac
⋯3 more rows
0x1ffc00000000000000000000000001bf0000................
0x200cd7cbcbcf859090ccd0ca8c91d28c8986................
0x201cd291dcd0d290d5d5d2d790d3d6d191de................
0x202ccccf0000000000000000000000000000................
0x203c00000000000000000000000000000000................
⋯3 more rows
0x207c00000000000000000000000000000000................
0x208cd7cbcbcf859090d2c691d28c8986d291................
0x209cdcd0d290d5d5d2d7908f8f8690d3d6d1................
0x20ac91decccf000000000000000000000000................
0x20bc00000000000000000000000000000000................
⋯3 more rows
0x20fc00000000000000000000000000000000................
0x210cd7cbcbcf859090d5cb8d91d28c8986d2................
0x211c91dcd0d290d5d5d5cb90d3d6d191decc................
0x212ccf000000000000000000000000000000................
0x213c00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.