Extracted

• • Target

    3ea9612dc4f0f0aa8e3bfe877f1c3f7bfd79145f22fb9276f08357479a309592.exe

  • Size

    33KB

  • MD5

    b45d6b705ff5e1d95974f680c73edca0

  • SHA1

    551891b184c060b8aadc3e951c6ec4afce2b4b32

  • SHA256

    3ea9612dc4f0f0aa8e3bfe877f1c3f7bfd79145f22fb9276f08357479a309592

  • SHA512

    8e8f3c0becb83bfce4f8f388c2d7625f31ad338bf7482c4f6ea69de1fd8447d157bb6e8f4252969abbd3c597b9ad0fe6d0dd51c8474395468336e45bbd155400

  • SSDEEP

    384:Ql+PkjD9+E5MFs7iui8L7zoM42pfL3iB7OxVqWDRApkFXBLTsOZwpGN2v99Ikuik:k+CD93W03F42JiB70FVF49jzOjhebo

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Detects Windows executables referencing non-Windows User-Agents

  behavioral1behavioral2