Trojan.Win32.Buzus.rwn
Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256fa258c7e2c97dff04dd94d25ff99457ed0327a3f1edd36e901aeb217f66a7231
MaleculeMdTh
Evidence
⋯3 more rows
0xd9f05850414444494e4750414444494e4758XPADDINGPADDINGX
0xda0099809f80c78786c48099c78b809395d8................
0xda10d8dfde95888580c78c918c9592abdfa8................
0xda20d1d9dea7dfc4dddbadafc4ddbed9dbc4................
0xda30d0daacdcc4abd8dcdfabdaafa8d1a8a5................
0xda40d89495888580958ad3b59e80878d869e................
0xda509a95908c9a95908c9a958895908c9a95................
0xda60be81809d8ca1869c9a8c95878695908c................
0xda709a95908c9a95878695878695819d9d99................
0xda80d3c6c69e9e9ec785869f8cc78a8684c6................
⋯7 more rows