Extracted

• • Target

    c694e389fa229bf1a03768bee4ee8d6c

  • Size

    58KB

  • MD5

    c694e389fa229bf1a03768bee4ee8d6c

  • SHA1

    537094682375978804a5b2b4f199c41696982d86

  • SHA256

    2e43e8cac10e96708dc36676f42f14c2142cd6ea6b3d772d179c6e6f2481492e

  • SHA512

    6dbcca3bb93239da140a6e498d52d1587901d3a896152b00988ec53127d2d8e624f3b97cfdc3c21403c7454fd72d2418c8e59515ad04994250e9625699ffff61

  • SSDEEP

    1536:RAjM7DMN0yAAmcFHN9utlM5L1mQQDJWHKjb:RAD0LAtFHqjM38vb

  Score

  10^/10

  xwormrattrojan

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1