Extracted

• • Target

    LoanerLoader.exe

  • Size

    68KB

  • MD5

    e9025d542e985636c83f73b64400f1e3

  • SHA1

    1598e3a7ee869c2af20c9120484620b514a7738f

  • SHA256

    c8a4a39fb24bdc17fccd5c1493a46dce1f3e218c062512e045f0b28be3100363

  • SHA512

    04179f364b90493b4f570a19ba34b5027b035b59439fd576dcb4ea84a308f3732b39dbc048e91ffa74d5dd257fa61bd31bfbc8145d63e0d88294a2fc06ddbcec

  • SSDEEP

    1536:1mWIlzeJCL0dPLs8bCiHGDabO4bwAq0L7py6gpOnlYmJvL:1mPLcLGD2BbPfxKOnlbL

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1