Extracted

• • Target

    Virtude.exe

  • Size

    40KB

  • MD5

    b3b15935559f74aac66ce1ce025f9b2c

  • SHA1

    e31e5cff9413066fda2ec68ff74bf6cd12b28ebd

  • SHA256

    f3f3df57c711d921954e1f69e76a866151280e4aaa1da1e9b40138b1c752840e

  • SHA512

    ffb4e64e0541cf4256e3064ef5900c15b72212172376314f68c7059932a833d44c501fce7f7ae121f99a2f8627078257792ad15d7eb86b55ec13d88f3723f960

  • SSDEEP

    768:afw749swluM7R1Acpo+I2tMmy9LKdV2smGoRV:as4iA7R1Atr2yehAX

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2