Extracted

• • Target

    Lucid.exe

  • Size

    8.4MB

  • MD5

    ac6657f44801b542f717e18665145e5b

  • SHA1

    efbf677cfce4054813fb3004e42e524dbdfa4501

  • SHA256

    e462d3688c61db7516a7ada8fb4a990b77cfdd33f2df7e84005042dfdf74c544

  • SHA512

    3ec5ab2455e249834d2d83b29d14d9105d7dc2fcb93ab84dc0c174317a40eb4adeaa438836579fc0befb1d5605f3aec84e43cf4c91ddf020808aa7e164c4ed3b

  • SSDEEP

    196608:RHUsHahjutr1zWC+vfOccaK3doVo8UdY5:S0a+JgvfFcrEmi5

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1

• • Target

    key.exe

  • Size

    69KB

  • MD5

    a230d428e97911ce6959e1463d781257

  • SHA1

    0946c13059bf98fd3aacefd0b2681a42b95292cd

  • SHA256

    c8e088feb7de05c3852af588c1a440f61d06870a93b07a3c6b7e2c12c9d55b12

  • SHA512

    089f7f6e979729ba037a19510be160d1c407c712fa01614815ce2427ff6c8fe7fa80a2cb673a36611dc37734aba63f7c87832c3848ac9ce011343c0e15b7aa68

  • SSDEEP

    1536:KWEyI4XFyV0UUIRiZAkupj9bIu9uLhQSOIcoFqXgG:KWnIiyVxRiij9bIYYhdOBuqXz

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral2