Trojan.Win32.Buzus.yqg
Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256a994e123b619c3e920cb486c7f88e33ecf8cf700b0d367e340ed9aed6af2c2ab
MaleculeMdTh
Evidence
⋯3 more rows
0xd9f05850414444494e4750414444494e4758XPADDINGPADDINGX
0xda0098dcdddad0ded9d9ddd8c7dadadbdbc7................
0xda10869b8e95d1d9d9d995888580c78c918c................
0xda209592abdfa8d1d9dea7dfc4dddbadafc4................
0xda30ddbed9dbc4d0daacdcc4abd8dcdfabda................
⋯3 more rows
0xda709d8ca1869c9a8c95908c9a95908c9a95................
0xda80908c9a95908c9a95878695819d9d99d3................
0xda90c6c69e9e9ec7dbd1df81888a829d8686................
⋯7 more rows