Backdoor.Win32.SdBot.bnh
Detects an XORed URL in an executableEncoded content decoded: xor
SHA-2567182673fd07b1c480dfca8a2830ea8b092aa478d32c877958dbaf54632312bc1
MaleculeMdTh
Evidence
⋯3 more rows
0xe0a8d6fca6c7c0000000a4bbbab8ba000000................
0xe0b8e3fffffbb1a4a4eaede7eaf8e3e8e4fe................
0xe0c8e5ffeef9a5e8e4e600000000aef8d7f9................
⋯4 more rows
0xe118bbe8ffbbbbbbb9a5ffe6fb00aef8d7f8................
0xe128bbe8ffbbbbbbb8a5ffe6fb00d8e4edff................
0xe138fceaf9eed7c6e2e8f9e4f8e4edffd7dc................
0xe148e2e5efe4fcf8d7c8fef9f9eee5ffddee................
0xe158f9f8e2e4e5d7d9fee5000000d8e4edff................
0xe168fceaf9eed7c6e2e8f9e4f8e4edffd7dc................
⋯3 more rows
0xe1a8cfe4e6eae2e5f8d7eaede7eaf8e3e8e4................
0xe1b8fee5ffeef9a5e8e4e6000000d8d2d8df................
0xe1c8cec6d7c8fef9f9eee5ffc8e4e5fff9e4................
0xe1d8e7d8eeffd7d8eef9fde2e8eef8d7d8e3................
0xe1e8eaf9eeefcae8e8eef8f8d7dbeaf9eae6................
0xe1f8eeffeef9f8d7cde2f9eefceae7e7dbe4................
⋯7 more rows
⋯3 more rows
0xe338f9e5eeffc8e7e4f8eec3eae5efe7ee00................
0xe348c2e5ffeef9e5eeffc8e3eee8e0c8e4e5................
0xe358e5eee8ffe2e4e5ca00000000c2e5ffee................
0xe368f9e5eeffdafeeef9f2cfeaffeacafdea................
⋯7 more rows