Benign Download

Worm.Win32.Socks.agv

Detects an XORed URL in an executableEncoded content decoded: xor

SHA-25690a2716d7d01afd055bb8f83f13fcd5e7da3950653d699cd202f0f7b2221fe94

MaleculeMdTh

Evidence

Detects an XORed URL in an executable 0x823c–0x82fc

⋯3 more rows
0x826c00000000988240005086400058864000[email protected][email protected].@.
0x827c6a767672382d2d666c712f606e63606ejvvr8--flq/`nc`n
0x828c632c6d70652d716a6e2d000072756100c,mpe-qjn-..rua.
⋯7 more rows

Encoded content decoded: xor 0x8358–0x8488

⋯3 more rows
0x838864776b392326670e090e092670000000dwk9#&g....&p...
0x8398506c6577746271665f4e6a60716c706cPlewtbqf_Nj`qlpl
0x83a865775f546a6d676c74705f4076717166ew_Tjmgltp_@vqqf
0x83b86d77556671706a6c6d5f51766d5f0000mwUfqpjlm_Qvm_..
0x83c86b71707660770000677372696a696762kqpv`w..gsrijigb
0x83d800000000565c56514048594670777760....V\VQ@HYFpww`
0x83e86b71466a6b71776a6956607159566077kqFjkqwjiV`qYV`w
0x83f8736c6660765956666d60617069600000slf`vYVfm`api`..
0x84084b6f6365675263766a0000005e677a67KocegRcvj...^gzg
0x8418646b6e675e716a676e6e5e6d72676c5edkng^qjgnn^mrgl^
⋯7 more rows