Benign Download

Trojan-Proxy.Win32.Daemonize.lh

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256263e2336d92d90c11a3dda054d753da988bcbe68ca5bbb40c4990c586d005df3
MaleculeMdTh

Evidence

Detects an XORed URL in an executable 0x0–0x130
⋯10 more rows
0xa02047504c207669727573207363616e6e GPL virus scann
0xb06572202d20687474703a2f2f7777772eer - http://www.
0xc0636c616d61762e6e65740d0a24000000clamav.net..$...
⋯7 more rows
Encoded content decoded: xor 0x5c9–0x6d9
⋯3 more rows
0x5f9ad8db1abbcb8bdd98ab5bcbca9d9d949...............I
0x609b1adada9e3f6f6afb0aabcacabaaf7bf................
0x619abf6b0b4b8bebcaaf6bbb8b7bcabe9e8................
0x629f7beb0bfd9b1adada9e3f6f6aeaeaef7................
0x639a0afb6b7f4a9acbbb5b0bab0bdb8bdf7................
0x649bab6b4f6b0b4b8bebcaaf6b0b4b8bebc................
0x659aaf7a9b1a9e6aee4e9ffbce4e1d96868..............hh
0x66968686868686868686868686868686868hhhhhhhhhhhhhhhh
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.