Benign Download

Trojan-Downloader.Win32.Small.yad

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-25605343f1e7b5b1d23ea99672767acd7efb3f107a42e30dc721c5dd7a95fbe2d2f
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x285–0x365
⋯3 more rows
0x2b5d8d8d8d6c762d6d86cd115f960d99415.....b..l...`...
0x2c5f98cb0b1abf8a8aab7bfaab9b5f8bbb9................
0x2d5b6b6b7acf8babdf8aaadb6f8b1b6f89c................
0x2e5978bf8b5b7bcbdf6d5d5d2fcd8d8d8d8................
0x2f5d8d8d8878fd367c3eebd34c3eebd34c3......g...4...4.
⋯7 more rows
Detects an XORed URL in an executable 0x82c–0x8ec
⋯3 more rows
0x85cd8d8d8d8d8d8d8d8d8d8d8d8d8d8d8d8................
0x86cb0acaca8e2f7f7aabdbcbcb1b1f6b7aa................
0x87cbff7bab9bbb3ada8f6bda0bdd8d8d8d8................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.