Extracted

• • Target

    df.exe

  • Size

    41KB

  • MD5

    afaf1c9ead744f15ce545ee3695d3836

  • SHA1

    01815f63bc7bac3f2ae3645eb8e1e848b57a1195

  • SHA256

    c6bbc1ad606b87a1dbaf549ec82f321a21dd38f2f1357379afc988f3ec1ffb49

  • SHA512

    bcd6169039743a223795e7768cba1cb2073bbb0ced57adc7edb2fa588a3f5d4080005fd741a63b049e796dd40342047461b7e12f96b5793bc214004a8b22f3a8

  • SSDEEP

    768:PbmspVWP24S4mg4SjeMNu0Rpj9liAsQhLOewo1SR:PB8NTj9lh1OkMR

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Executes dropped EXE

  behavioral1