Extracted

• • Target

    c29c2c7ce19d21b061526c245a2ad74fe438234e859d643f42b56b65fa9f5d87N

  • Size

    79KB

  • MD5

    a79d6693739e5d03340b87304f8d63b0

  • SHA1

    92eb66899b10b210ccb0793b88c1ad0d14f66498

  • SHA256

    c29c2c7ce19d21b061526c245a2ad74fe438234e859d643f42b56b65fa9f5d87

  • SHA512

    9ef415f5fa9af1a9d4ddb8ac9ebe6a24bd2203f3369474b40d2479c2adc10a4c59663416b58f18f35787ba4bae9f4fa7ea3b681c841b6458637c6b877b6bfe15

  • SSDEEP

    1536:/14Qr2GY6Czn3B+aPAJj0LIiSbTbwsgyE+CRN6Y6O/aHuzp:/jrFoH+jAgTbw8E+CRoO/a2p

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2