Extracted

• • Target

    e9fb65bb3d8aef622fe674d24bae8e4dcfc688f82d95c1eeb1be778e7bfb08b4

  • Size

    94KB

  • MD5

    15f590d01e895b97bc3717009af7c3a5

  • SHA1

    14208862a69608a228becbfd2b97f4b1dc4a8e59

  • SHA256

    e9fb65bb3d8aef622fe674d24bae8e4dcfc688f82d95c1eeb1be778e7bfb08b4

  • SHA512

    d1786b5771b182f06fa1ed17f79f40e8f7497457305d63c029b2321ee0108836b60470ca535f85e0c5a5c5dc059c288adbc3f20267ff38ec0210223aec6f6e70

  • SSDEEP

    1536:nUhTw+85Q73zx+aEV9TWGjJPxbileYbvlD++kam:nsjeQ3x+zIYJJbsbvlDF4

  Score

  10^/10

  xwormdiscoveryrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2