Extracted

• • Target

    XWorm.exe

  • Size

    42KB

  • MD5

    d5ce1eaefcb5a261a924a376ad1e91ae

  • SHA1

    3b1eea344009649c1ffe46d0fa8e0fc63aa38d67

  • SHA256

    5a8f9cca13b5eea8f7780c52ab794184586bd89820652da8af425fa6b2bafb83

  • SHA512

    f332e616d821a6f47ff89c235a8bd75b7d49072cca162a71ae0808f533dc9e6be11650689197308cde8cf8c2c5cd7bb65674cb2be5812cca686fb97ee7b873ed

  • SSDEEP

    768:qHbArjN0WFd8owTxxuCIF9G3RcWZ1ryB:ZnZgd0F9Oc+S

  Score

  10^/10

  xwormrattrojan

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2