Benign Download

Worm.Win32.AutoRun.psk

Detects an XORed URL in an executable
SHA-256c674fdab2ac2b999b003725082a8ddba6fa60b780acec1c87fbbd963c31adb48
MaleculeTh

Evidence

Detects an XORed URL in an executable 0x1bbb–0x1c7b
⋯3 more rows
0x1bebc408ee199cbddbdee293f9f1620180f0............b...
0x1bfbd5c9c9cd879292d093deded988ad00e8................
0x1c0b1892d9d9928c8801be4906fef9d2dec8.........I......
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.