Extracted

• • Target

    fd8591b5b854c15fbdd4206aa8d7d6fab8082db2cd2d2e9fd983c1bd7e642192

  • Size

    40KB

  • MD5

    c972d891311369e3c9c563a0aea3397c

  • SHA1

    3d7359a43a29373950efa72720014a7ce2e5a484

  • SHA256

    fd8591b5b854c15fbdd4206aa8d7d6fab8082db2cd2d2e9fd983c1bd7e642192

  • SHA512

    c712e7fefdb2c9bf618177a836f8a2abd8b72e40feb47abad6fb403e56cf363d222f34aed6a18f2409661e579b733204fef0c40ffa99663208a520d53127cced

  • SSDEEP

    768:+e5ebFbV9gZtYqK0PAucy97KdV2ULT0RS6:+e5I39gZtYxyhOZsk6

  Score

  10^/10

  xwormpersistencerattrojan

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2