Email-Worm.Win32.Warezov.nl
Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256357cce602c95fb05bcd38de09eb0bcfef27f3c4bc56faa03008c3a2f9c474e3d
MaleculeMdTh
Evidence
⋯3 more rows
0x22528703e0010303132333435363738390000p>..0123456789..
0x22538687474703a2f2f000d0a000048545450http://.....HTTP
0x225482f0000004d465b40454b4a2e00000000/...MF[@EKJ.....
0x2255862445758455053441b73585559525f58bDWXEPSD.sXUYR_X
0x225685136000000000000c5c7d6a2a7f1a2caQ6..............
0x22578d6d6d2adb3acb38f88caedf1f6b8a2a7................
0x22588f1b8a7e68f88d7f1e7f0afc3e5e7ecf6................
0x22598b8a2cfedf8ebeeeee3adb6acb2a2aae1................
0x225a8edeff2e3f6ebe0eee7b9a2cfd1cbc7a2................
0x225b8b4acb2ab8f88c1edecece7e1f6ebedec................
0x225c8b8a2e1eeedf1e78f888f888200000000................
⋯7 more rows