Extracted

• • Target

    XClient.exe

  • Size

    60KB

  • MD5

    de5e007cca8560c530ed376d6647436e

  • SHA1

    6d93702a99859ee7c8014ad28650139f544e486e

  • SHA256

    b666248414334aa764720592fd1d5d5789c3036654ec98d8e4bc9ff6da75b218

  • SHA512

    f1e4b994f5dd0251b99e536cf203d7c98590b8ac338006b120d4a8362c764973eb5353eecb949bfde177608d3c04076396da26d3f1359068275fa7fc2c1b234f

  • SSDEEP

    1536:F8QzsjdmRvsl4nTzqDZqwhUQbPtyA26rj6lOLECD:hkl2CAwbPtcOw0

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1