Extracted

• • Target

    hawktuat.exe

  • Size

    75KB

  • MD5

    ba3af20e691277dc2f1e9c7fae9fb732

  • SHA1

    213ed9eb6d8e9e5e1799e983ddb8bcdd2c8ff9d9

  • SHA256

    9413b3e90fac7b85565005468fec6a6a2bff71f7bb66d227899e8373a21a30e7

  • SHA512

    682d586071252f762c7d5fc55c87c068953957ef844703a269ae3f43bd908365cbfe3609558aa21971493fcc77dd1caa0d1386165c5a4d789ba1e92fb623f099

  • SSDEEP

    1536:M1tBQ1NOo7kl2d8mUO77zJlMbZbruZqA/UgyCq96X53wdOCnlQ:WtWStmV7zJlM1bSas53wdOClQ

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2