Benign Download

Trojan-PSW.Win32.Delf.cii

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256a4a0658e84b4766b304375bae76044b2a9e2138a67f5267b194866956c49e834
MaleculeMdTh

Evidence

Detects an XORed URL in an executable 0x35ac–0x366c
⋯3 more rows
0x35dceb5f5e5b8be55dc3ffffffff07000000._^[..].........
0x35ec687474703a2f2f00ffffffff01000000http://.........
0x35fc2f000000558bec81c4c8fbffff535633/...U........SV3
⋯7 more rows
Encoded content decoded: xor 0x55ac–0x568c
⋯3 more rows
0x55dceb8be55dc3000000ffffffff2d000000...]........-...
0x55ec5f434a585b4d5e495041656f7e637f63_CJX[M^IPAeo~c.c
0x55fc6a78505b656268637b7f504f797e7e69jxP[ebhc{.POy~~i
0x560c62785a697e7f656362505e7962000000bxZi~.ecbP^yb...
0x561c4b6973734b4f426162790000558becb9KissKOBaby..U...
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.