Benign Download

Trojan-Downloader.Win32.Agent.orq

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256136dcd05220181d053cbed5c4b0613b048d591fa48174e09be4dfc13251d40cd
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x1a0cb–0x1a1ab
⋯3 more rows
0x1a0fb004d5a0000074572617a65725afdee02.MZ...ErazerZ...
0x1a10bde9589898dc7d2d28a8a8ad39398929a................
0x1a11b91928f84d39e93d293988a8ed289908d................
0x1a12bd3988598fdfdfdfdfdfdfdfdfdfdfdfd................
0x1a13bfdfdfdfdfdfdfdfdfdfdfdfdfdfdfdfd................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.