Extracted

• • Target

    DELTAV8.exe

  • Size

    154KB

  • MD5

    00b64deb077bfedee3502ff6cbc8d9bb

  • SHA1

    5bdb4b86bd5b848781f2becafa864a042c924d59

  • SHA256

    42d56d946fbaa549e09cdc4d0f8d65fbe7c9f85927199cd1e9238f4813c8dd70

  • SHA512

    08f10d79207b937976675bf2efea08e325c2e83507904304df7cd51154fff7ffcbab7cab89833c27735ca6a60c9a57d9cc6dc61c2a972e3055065ac9f0de41fa

  • SSDEEP

    3072:psBkPmkbrGp3tOuUjBz65/M6If+3Js+3JFkKeTnd:pDdbKp3oxBt25

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2