Extracted

• • Target

    0f659dec7213d244ebd6fb42cf85981b6a55e91b7f4d1db1dbfa9e21c9d7e633

  • Size

    100KB

  • MD5

    e56c93a71f5733ebc322a33658d19822

  • SHA1

    dbfc91851cffa4dcc8ef2bd394f14e7e9d3da139

  • SHA256

    0f659dec7213d244ebd6fb42cf85981b6a55e91b7f4d1db1dbfa9e21c9d7e633

  • SHA512

    edc74826f32c148484509af0e4b8f55d66e16b10cb52d0ec2c43342d215ecee873fba7a56a8f2b43d133d2057e273d70b60d44e1fcf5376733a666bc701a859f

  • SSDEEP

    1536:bEOwgFowSgnVVVHzExnAdgVxDSMnEiqIYdfi/GExtulSpn:4rwanDVxjqdIntulS

  Score

  10^/10

  xwormdiscoveryrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2