Extracted

• • Target

    LQ21592-Drawing.pdf.exe

  • Size

    963KB

  • MD5

    dfee7c2ce48f20911480549119dc23f7

  • SHA1

    5385c3905ad8e901c81fa3e9bfbe547407a592e1

  • SHA256

    e6bb0019f6aa3583c42c8e197631af09f07bdc8739442893cc8086f298929e33

  • SHA512

    43f98c5decf98c4bee8e864b7b110bf1a4ec501d657f327ce0fdc527e3f98652192afb7dfcbf5a7f98a2bad00f24612e964ec7c157a09e678d8f847d4ed1c564

  • SSDEEP

    12288:DuUNFThRuf3o53Gsp2hXZlh8+sJDv4alfZqby13caYgd2D6o4U3+:qULhYf3o5DpYlh8hJT4gcaYgdfo4

  Score

  10^/10

  xwormrattrojan

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Drops startup file

  • Loads dropped DLL

  behavioral1behavioral2