Extracted

Extracted

• • Target

    XWorm v5.6 Edition Cracked By WantHacks.rar

  • Size

    22.1MB

  • MD5

    f2bc2af2db699fcc4a6a86dcdcb63688

  • SHA1

    c640018e4f0a0b314012a25c0eb87cba17f14d28

  • SHA256

    61e8f2c36942c9910c894ae09f9554462d98e38fce868574e8cf00283978ea83

  • SHA512

    00830190d2417f2a0f9fd168631ad8b8f6050cd8d48ba0f40ea8561cd6bf2b1d123c156f62e60260ff5328367c76bbbb750afb09b9bc2dbd57e3f7c10c398745

  • SSDEEP

    393216:+yaCIiJA/fWwI1VJkEhDQDNIoRcYN4SMV+fphpKotgPJXbK9/KW9KP6Qr+:+yoiJA/upytROSMVypjdtg5O9/KW6Tr+

  Score

  10^/10

  xwormpersistencerattrojan

  • Contains code to disable Windows Defender

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Executes dropped EXE

  • Uses the VBS compiler for execution

  • Adds Run key to start application

    persistence
  behavioral1