GData BB in action

[sepik]

Modification date: Friday, March 8, 2019 9:29:27 AM

Started by: unins000.exe
Publisher: Unknown publisher


* Actions *

The program has changed values in the system registry that can be used to endanger the system.
An unknown process was accessed.
The program has created or manipulated an executable file.
The program can be used to execute any program code.
The program has read data from its own program file.

YGLRupKbwHJyYmJyctBy4nKCcsLgcvJy0nKCcCp0okInKiYGt3KicqJiYoAsJyonKiYGuWLRunLokCwnB+lywiYmJidsoCgnJyYmJwfKcoItJiYn2LApJyomJicKrHKyLicsJ4vALycnJycmBm1yknKCcnLQKCeIYmJyggidcnJiYnJy0CsnJyYmJwfdcoJiYnKC0C4nJyYmJwd+cnJiYnJy8CgnqHKScoIHn3JycnJiYvAvJysmJicLdyonB4crJysnKCcJlyonJyYmJwenKCcpJykmBqcrF+g1tnIqF4s1xoJygV5jK4dw2nJyKiYmJ6dw23KCcnJycnD7cnItJiYn13DMcrJiYnKycOxycigmJieHcPxygi4mJifocJ1yknKCcnJwjnLycN5ycigmJieHgJZywg24LyctJywnB9guJycmJicH6CsnrHKicsIGAA
Rules version: 5.0.151
OS: Windows 10.0 Service Pack 0.0 Build: 17134 - Workstation 64bit OS
dll version: 76234

 

[sepik]

Dunno what that gibberish is... Some kind of hash table?
Anyway, i do like the way how GData logs BB / DeepRay attempts.
-sepik