Skip to content

Instantly share code, notes, and snippets.

@glaslos
Created January 26, 2017 10:30
Show Gist options
  • Save glaslos/2674ed6e486a9a23349b830dad49d306 to your computer and use it in GitHub Desktop.
Save glaslos/2674ed6e486a9a23349b830dad49d306 to your computer and use it in GitHub Desktop.
00000000 6c 76 7c 27 7c 27 7c 56 48 4a 76 61 6d 46 75 58 |lv|'|'|VHJvamFuX|
00000010 30 4d 30 4e 6b 59 32 52 54 6b 3d 7c 27 7c 27 7c |0M0NkY2RTk=|'|'||
00000020 4d 41 52 4b 7c 27 7c 27 7c 75 73 65 72 7c 27 7c |MARK|'|'|user|'||
00000030 27 7c 32 30 31 33 2d 31 31 2d 32 32 7c 27 7c 27 |'|2013-11-22|'|'|
00000040 7c 7c 27 7c 27 7c 57 69 6e 20 58 50 7c 27 7c 27 |||'|'|Win XP|'|'|
00000050 7c 4e 6f 7c 27 7c 27 7c 30 2e 36 2e 34 7c 27 7c ||No|'|'|0.6.4|'||
00000060 27 7c 2e 2e 7c 27 7c 27 7c 7c 27 7c 27 7c 5b 65 |'|..|'|'||'|'|[e|
00000070 6e 64 6f 66 5d |ndof]|
>>> base64.b64decode("VHJvamFuX0M0NkY2RTk=")
'Trojan_C46F6E9'
Looks like some trojan c2 ;)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment