Benign Download

Trojan-PSW.Win32.Nilage.axr

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-25689e5a46030b22f3adee7f4d8208be406022670b70219d2c2d01706712890b9ab
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x5724–0x5804
⋯3 more rows
0x5754010000005c000000ffffffff2d000000....\.......-...
0x5764d3efe6f4f7e1f2e5dccde9e3f2eff3ef................
0x5774e6f4dcd7e9eee4eff7f3dcc3f5f2f2e5................
0x5784eef4d6e5f2f3e9efeedcd2f5ee000000................
0x5794558becb9950000006a006a004975f951U.......j.j.Iu.Q
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.