Benign Download

Trojan-Downloader.Win32.Delf.bmn

Detects an XORed URL in an executableEncoded content decoded: xor

SHA-2565046d79a8054fc9ef75dea3641e774daebf176fb3ed1580f2dd00eb68454dc6e

MaleculeMdTh

Evidence

Encoded content decoded: xor 0x653c–0x661c

⋯3 more rows
0x656cff85f3b38fe7f3b35f80f3b3bb0ef3b3........_.......
0x657c97e7fec6dfc7dae1d6d2d7f6cbd0dfc6................
0x658cc0dac5d6e4c1dac7d6e0caddd0dbc1dc................
0x659cdddac9d6c13ef3b3e6385fe03a603a71.....>...8_.:`:q
0x65ac7259a3d5444038eebbd53ab2d53aa0e8rY..D@8...:..:..
⋯7 more rows

Encoded content decoded: xor → base64 0xc3b1–0xc481

⋯3 more rows
0xc3e185f3b36380f3b35f80f3b39b87f3b3ab...c..._........
0xc3f1f6e5d2c1dad2ddc7f2c1c1d2caffdcd0................
0xc401d8d6d7f6c1c1dcc13ef3b3eb63f3b3b3........>...c...
0xc411b3b3b3b3b3b3b3b3b3b3b3b3b3b3b3b3................
⋯7 more rows