Benign Download

IM-Worm.Win32.Lewor.g

Detects an XORed URL in an executable
SHA-256c2d835642bc56ce631df2e6fec1530825806e8bb0750d33b8475b98d19449a1f
MaleculeTh

Evidence

Detects an XORed URL in an executable 0x4f9a–0x505a
⋯3 more rows
0x4fcaa9bdab2ac3f5d5d7cbc0baf0c8d4b3c2...*............
0x4fda6e7272763c2929717171286c697f6f63nrrv<))qqq(li.oc
0x4fea7e2865696b2967646528637e63ccd5c0~(eik)gde(c~c...
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.