Benign download unavailable

Trojan-GameThief.Win32.Nilage.amy

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256c1518516efd98a64c904b2748ecd6143a0df27eee40c0ef064cbce6fa6ed9920
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x5148–0x5228
⋯3 more rows
0x517802000000f2b20000ffffffff2d000000............-...
0x5188d3efe6f4f7e1f2e5dccde9e3f2eff3ef................
0x5198e6f4dcd7e9eee4eff7f3dcc3f5f2f2e5................
0x51a8eef4d6e5f2f3e9efeedcd2f5ee000000................
0x51b8ffffffff13000000d3efe6f4f7e1f2e5................
⋯7 more rows
Detects an XORed URL in an executable 0x10cb0–0x10d70
⋯3 more rows
0x10ce06b00320020000000ffffffff1b000000k.2. ...........
0x10cf0e8f4f4f0baafaff7f7f7aeede1e2e9ee................
0x10d00efe7e9aee3efedafc3b2af00ffffffff................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.