Benign Download

Trojan.Win32.Delf.xn

Detects an XORed URL in an executableEncoded content decoded: xor

SHA-2565f3a54d682580a108344886c3f5f679dfc0eca55b66b66d02185c883cc60d1c7

MaleculeMdTh

Evidence

Encoded content decoded: xor 0x3df8–0x3ed8

⋯3 more rows
0x3e28cde1f0e6e9ece500ffffffff2d000000............-...
0x3e38d3efe6f4f7e1f2e5dccde9e3f2eff3ef................
0x3e48e6f4dcd7e9eee4eff7f3dcc3f5f2f2e5................
0x3e58eef4d6e5f2f3e9efeedcd2f5ee000000................
0x3e68ffffffff13000000d3efe6f4f7e1f2e5................
⋯7 more rows

Encoded content decoded: xor → base64 0x2733c–0x2740c

⋯3 more rows
0x2736ce3eff5eef4c9c400ffffffff18000000................
0x2737cf4e2cfece4cde1e9eec1e3e3eff5eef4................
0x2738cd0e1f3f3f7eff2e400000000ffffffff................
0x2739c070000003e49435c426bba00ffffffff....>IC\Bk......
⋯7 more rows