Benign Download

Trojan.Win32.Agent.rqf

Detects an XORed URL in an executableEncoded content decoded: xor

SHA-2569db73b38dfd0fb434749c43ce014e586226f854af7e926eea73b8d7165a5cabc

MaleculeMdTh

Evidence

Encoded content decoded: xor 0x83a4–0x84e4

⋯3 more rows
0x83d40b0000002a3d3d110000002f0000002a....*==..../...*
0x83e45549494d07121257485859485447485cUIIM...WHXYHTGH\
0x83f453135e5250125e5c524a524a125a5849S.^RP.^\RJRJ.ZXI
0x8404135c4e4d3d3d120000000b0000002a3d.\NM==........*=
0x84143d130000000b0000002a3d3d14000000=........*==....
0x84240b0000002a3d3d1d0000000b0000002a....*==........*
0x84343d3d1c0000000b0000002a3d3d200000==........*== ..
0x8444002f0000002a5549494d071212574858./...*UIIM...WHX
0x845459485447485c53135e52501251585158YHTGH\S.^RP.QXQX
0x84644751125a5849135c4e4d3d3dffffffffGQ.ZXI.\NM==....
0x84740b0000002a3d3d000000000000000000....*==.........
⋯7 more rows