Hiding in plain sight: a story about a sneaky banking Trojan | Malwarebytes Labs

< Business ThreatDown BundlesProtect your endpoints with powerfully simple and cost-effective bundlesEducation BundlesSecure your students and institution against cyberattacks Managed Detection & Response (MDR) Deploy fully-managed threat monitoring, investigation, and remediationEndpoint Detection & Response (EDR)Prevent more attacks with security that catches what others missExplore our portfoli

[you0708]

『To make identification more difficult, the appended data is encrypted with Base64, RC4 and XOR. To decode it you can reverse the file with a debugger such as OllyDbg and grab the decryption routine.』