Extracted

• • Target

    1722924067fc8318f8c090d562f8adb507b77f61b0e263d41a3f8345496434e8ddc0ef93fc559.dat-decod

  • Size

    39KB

  • MD5

    f0c26c9555c9414af344d284bcb7e0a2

  • SHA1

    b4c1ac2c7ebf20eb0b00f0101adbbaf9523f4997

  • SHA256

    b23b57a2f2668cdcae964bb464b1e8312f244c143123ab5d62bd1dba8ea078ac

  • SHA512

    5eb9f7808914821319b6f835dbc37267b68fd904a523f0ab0ffe855622d425954ff8f21a589436b35d3eb0caaa4f24c8690abad1202470b9ed6d4e7680daa9c0

  • SSDEEP

    768:XxGZOSN/3Qoub2qI7s4p1l4IHofeFv9WvO+hgq77:X8ZBu6d1lKmFv9WvO++G7

  Score

  10^/10

  stormkittyxwormcredential_accessdiscoveryratspywarestealertrojan

  • Detect Xworm Payload

  • StormKitty

    StormKitty is an open source info stealer written in C#.

    stealerstormkitty

  • StormKitty payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2