Extracted

• • Target

    Injector.exe

  • Size

    38KB

  • MD5

    424a9e83ab70500a16bc52d86016fffc

  • SHA1

    14dba3bd7d5564f8538a78e4da34a7bc460166d6

  • SHA256

    015d90cb2d696c35b623c2f2283ae931a52fa06eabb162289b183f5bf6c5cafe

  • SHA512

    f53682fd9f668c38cb89682911a98c86d8ac97d6f7f344a3f678abc36a69a504ee54bc0e871136cf4807d253575fae82574ac222f85083d180c7be811535dcd9

  • SSDEEP

    768:scZ7ehfsvhd9vncvL1EZ251TR8FF5Pj9I/OMhd3Ii:scAqv90C08Fh9I/OMXd

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Deletes itself

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2