Extracted

• • Target

    Windows.exe

  • Size

    78KB

  • MD5

    52b334daf026c1ab82f2ff0242c54792

  • SHA1

    0823fd71da8c8054bae33f19283eafeb9486a018

  • SHA256

    cfe8b118764fc5f6c396066a7367ea676c423cd2a35a52084c256c93cb91b670

  • SHA512

    58d2bdbfef97a3f0451de56ea8a25d0a4bfdcfc3f8ca45c65bcd75b973d666b9961725494898c6f25d12d3c1c61858d5b0d4fdb6a713a9a0eacc41684f5073f0

  • SSDEEP

    1536:+2O8ZJKlYJvlxuvfWP77S4eVZwbSde+3uefh6Ehu6FOXRNfDQLuvn:ZZNplIvfWP3eVZwbSdzhfyiOXRNLQSvn

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1