Extracted

• • Target

    Client.exe

  • Size

    40KB

  • MD5

    a881effab5bc8900bd07d639d00c7e12

  • SHA1

    80cbd3272c1413b00ac7073a6204440c2e29fe4e

  • SHA256

    2f5304b657b07839525d7d3ef50f192cde2bcab15b8fde2a6ff264f6412290df

  • SHA512

    e5e607e461cbad98ef713fef484ec118a9475db63df344fb736cd98625d18dcefa47687f5fbef844163b2730b09e9764071c8e2035b5a9483e79e7f1b94e8c6f

  • SSDEEP

    768:WI1b0LN5qw4+nfSVoRT0Rp0wRULsQhLOrwoE/6q:V1bCq+apRRc1OTE/6q

  Score

  10^/10

  xwormrattrojan

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Drops startup file

  behavioral1behavioral2