Extracted

• • Target

    efae58269c0a099526d27b8d56ceb9223327748050db9e35e309ae7c88d96211N

  • Size

    74KB

  • MD5

    fd607a691f63b595e271c88d062053f0

  • SHA1

    5525946841b5585a880083f284abbb5e861d3766

  • SHA256

    efae58269c0a099526d27b8d56ceb9223327748050db9e35e309ae7c88d96211

  • SHA512

    ac524a6a832e9a8f9991638f92c0ded4c7ed176dcc191fd972bbe0dfc3ff56b24205c51fa4251ff47dee7a1501d6385e9339b70e5559ad4e6525c1c95762c7a2

  • SSDEEP

    1536:DM2PilDF9dWySyl/s2tjFJhtH8qsTabwbyR2ye/6CCORaDyddkS:jilF9OP2t5JhtHtbwbKzeEORQS

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2