Extracted

• • Target

    2024-11-10_bb2fb269c54f442475ad7648f92bf335_hiddentear

  • Size

    183KB

  • MD5

    bb2fb269c54f442475ad7648f92bf335

  • SHA1

    a98a9cba1ee408ea3482a4c1b1d029dc06b6c485

  • SHA256

    2d4742b50b053e1fee4d654a2f698402a5da6e9a584e73b83fb7ee7119c425e8

  • SHA512

    013ceb31fda3c3e703110629edc6c9a5ae08c8a0c71be26093837fbb89f22b3c0b2f68a3c818af1f6fb70b3f6116c47b3a097937270ec561d57eefc005f51885

  • SSDEEP

    3072:wWzX+9uQ5p6ku+6bpifXN6O01TM+lmsolAIrRuw+mqv9j1MWLQ1:Ycr+6bGd9+lDAA

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2