Suspicious 80% Download

Trojan.Win32.Agent.aleu

Named Trojan, evasion, signed anomaly

MZ DOS signature validation string
SHA-2562ca9278f7a592836af54d94c40568833f443f7992cbc5ced95f61cbaef91dc0d
MaleculeO(Er)

Evidence

MZ DOS signature validation string 0x21bc–0x22dc
⋯5 more rows
0x220c64006c006c000000564200002e000000d.l.l...VB......
0x221c4d005a0020007300690067006e006100M.Z. .s.i.g.n.a.
0x222c740075007200650020006e006f007400t.u.r.e. .n.o.t.
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.