Extracted

• • Target

    XClient.exe

  • Size

    36KB

  • MD5

    76abc5eee266baab28bed67c7b6b9f5b

  • SHA1

    4314935d1cc93032cec978a80bcd4437c35520dd

  • SHA256

    e10d23d5da319f888ea91736129672e90445b935c62dbc945dd1d22b88a78e24

  • SHA512

    dec42cda9f35d322365d92e8c36a2c1735d8a957a1a061ca74fb8364b186ff29330c5dff10b49d1cc2cda453c2232ca296a8321840acd737ceb5a58abf8d92c3

  • SSDEEP

    768:8T1ZDbYFdqCoYa+QRz7pudDxZEQy1UrILFyW9fsmOjhRPya:GZ4RZQR/2rTiU+Fv9ftOjPz

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1