Extracted

• • Target

    XClient.exe

  • Size

    66KB

  • MD5

    ab070f8664f35e9c77d4ab23ea0c4a16

  • SHA1

    56cf8c2e6395ff9aaf39e503e9fee5ab32a64831

  • SHA256

    e42cef3b111bc0783016404bf8f53207b2ad955ee2c127f437fbe96a14f6d71e

  • SHA512

    af5c4985cb8d954387b950ef4a306b354f4bd7e30b6a715763894e8245f82df34dbcd334b95092864be113c15b642f1104f39a325a2934c0a453febae106aa63

  • SSDEEP

    1536:VpFUPjZyHBjyUt0eeuKa9+bq9h2QArOc9nodS1EAd8IIR:VXKjUjyveeuKa9+bq+jrOc9wgEA6IIR

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2