Extracted

• • Target

    v14.exe

  • Size

    37KB

  • MD5

    f3176b6a3fcab34a7df5fdd762c37bf9

  • SHA1

    6bf793c3fd89b5a5438151cbd9ea447a4cabc42c

  • SHA256

    a0992a4a5829667c14120cdba4db8e9e6c87d3c7c1af623d32513f306ca1ad49

  • SHA512

    9e9b739c9b425e642d561605c80e5e4849b1f03c93075888fc10fb95022757b1832eb4ab304644a3e70d458cb08023e2dea828e09c0d1f6fde8ecf527f1509b0

  • SSDEEP

    384:G/Um5pBB4EP1vNhJfyS0vuuNatELvr+C5mbTT3rzMurARQaKgO0/pkFMAzNLTAZB:9gt8nyC5kTdsRFOTFQ9YCOMhm4R

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  behavioral1behavioral2