Extracted

• • Target

    87fcd72d5a220af7e19b13236a28a6258e38cf6040f03cdb7fff46d98f01b0b1.exe

  • Size

    142KB

  • MD5

    c00217935070f3582e3e7352f9d4b33a

  • SHA1

    a4a01d96f20c1858b2327d3cc42d9633e0c9c715

  • SHA256

    87fcd72d5a220af7e19b13236a28a6258e38cf6040f03cdb7fff46d98f01b0b1

  • SHA512

    89e90e99ffd9a35512e44dd83a9dc7bbab213fa6ad6758dd11225a4615ee165e757d71057e3e6c21198120babbeee46e5217ff05494229f8ab602c5d71c1e190

  • SSDEEP

    3072:kglFIo1nWg7NBWM8kWCZRTdkS6I81QcLLP9JurW2N8BJ:dlF2gjTdoLz9CW

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Suspicious use of SetThreadContext

  behavioral1behavioral2