Benign Download

Backdoor.Win32.Kbot.dd

Detects an XORed URL in an executable
SHA-25654665c6fee27b7f48b846769e6185a0ad1ea158d16123e1fd1cd296e719ea292
MaleculeTh

Evidence

Detects an XORed URL in an executable 0x5a1–0x661
⋯3 more rows
0x5d1bd004ef6630ea499467992ed48556caf..N.c...Fy..HUl.
0x5e1809c9c98d2c7c79189681bf23687c6c7.........h..6...
0x5f1c8a0bcbcb828c6014fe5e2cea0a758ab.....(..O.....X.
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.