Benign Download

Trojan.Win32.Buzus.ydz

Detects an XORed URL in an executableEncoded content decoded: xor

SHA-256eee778b6f87b62031a42627a278376d6c8bf56a112b032982dce642fd4ced1c9

MaleculeMdTh

Evidence

Encoded content decoded: xor 0x605be–0x606ee

⋯3 more rows
0x605ee2f51d5362f3869f6ef5ba7d0c3d591ef/Q.6/8i..[......
0x605fecece99809f80c78786c48099c78b8093................
0x6060e95d8d8dfde95888580c78c918c9592ab................
0x6061edfa8d1d9dea7dfc4dddbadafc4ddbed9................
0x6062edbc4d0daacdcc4abd8dcdfabdaafa8d1................
0x6063ea8a5d89495888580958ad3b59e80878d................
0x6064e869e9a958786958786958895878695be................
0x6065e81809d8ca1869c9a8c95878695878695................
0x6066e878695878695878695819d9d99d3c6c6................
0x6067e9e9e9ec785869f8cc78a8684c69a8c9d................
⋯7 more rows