Extracted

• • Target

    MainUpdated.exe

  • Size

    61KB

  • MD5

    2d1117e76971378d13a5d79451fa585c

  • SHA1

    4cb446c2a6312b6da19683638f9ef16ae71e6328

  • SHA256

    f302df05db0c085c2614de01d1f351d88b102863bebdfa6fd2cb6dbba266889c

  • SHA512

    6545b824ea6b5659cba7cc5761bb0e68db3071c0077a39dc6257142defd49b370b11779243700f8acd4c25acac8fd39569f2c7a1b7e721ca90db74303dbb8ce5

  • SSDEEP

    1536:9jXPnvGv/tWNV9VsdCKoCRkbTCbBvP/OjQqudk+:9jX/qWz9OdDkbTGn/OjQqj+

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2