Benign Download

Trojan-Downloader.Win32.VB.asy

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256dc93887dcb778059a8202ed9ada454563f18b11f16047f1d70c533743183564f
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x2dc0–0x2ea0
⋯3 more rows
0x2df000000000000000000000000000000000................
0x2e006f686d6d766c6f6d6416666d64166664ohmmvlomd.fmd.fd
0x2e106866302c2c286277772f2f2f76312c3chf0,,(bww///v1,<
0x2e2060763b36776869763d203d6468666469`v;6whiv= =dhfdi
0x2e3066302c2c286277772f2f2f76312c3c60f0,,(bww///v1,<`
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.