Extracted

• • Target

    EvilClient.exe

  • Size

    46KB

  • MD5

    27c9c566a38ac81c96da26c1dfafd437

  • SHA1

    302dd73d55a56efed3764c47cee8bef4471eb7a0

  • SHA256

    68cf4b2abf9ece7f2bb322e3891f980736d9845003ef83fccfda9d62b79e5461

  • SHA512

    1e1a1b9f0bc474583e2bf69d9904d77959ff7323c618f21b912933beac559f01a0f621e9954af410cab33d585ec7c408e3a4ec31813f7ee5acf4971fbf8bc762

  • SSDEEP

    768:T3Agy05c6iYj2YHm8QJmgRhIr2EhihksceFeqJvXtuf4vvFQw+Ll9jPoPQhLO51C:KyiYj2YHm8QJmSQhOX/HUr7l9jr1Ofxo

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2