Benign Download

Trojan-Downloader.Win32.Zlob.mrz

Execute shell command (ShellExecuteA)Detour-style InstallHook helper name
SHA-256a9f66c8db2c2d794a7dfa2a5e4662668251f1cfb0f3d81121b53f1c4629454b4
MaleculeO(Er)H(Po)

Evidence

Detour-style InstallHook helper name 0xabfa–0xacba
⋯3 more rows
0xac2a00003ae000000000446c6c2e646c6c00..:.....Dll.dll.
0xac3a496e7374616c6c486f6f6b0000000000InstallHook.....
0xac4a00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.