Hostile 92% Download

Trojan-Spy.Win32.FlyStudio.aej

Named Trojan-Spy, sandbox evasion

Detects executables potentially checking for WinJail sandbox window
SHA-256c97564f3a44211285226ac7a5d30d506daee9e4ced5709b23e35163df258b0af
MaleculeTh

Evidence

Detects executables potentially checking for WinJail sandbox window 0x2cf0–0x2e70
⋯7 more rows
0x2d6000000000341024c10100000003000000....4.$.........
0x2d704166783a3430303030303a3000c8b7b6Afx:400000:0....
0x2d80a8002e64617400313231350075736572...dat.1215.user
⋯15 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.