Extracted

• • Target

    d8787c6e29540ab5c6594313dcc0ea2c7619c16038f276c93c82a82aa5be4bacN.exe

  • Size

    77KB

  • MD5

    5bf7c07a13d8fcc3c6ccb0a0ba82f330

  • SHA1

    d9d4edca73fd5258b0e5f2be6635007f2981b6b9

  • SHA256

    d8787c6e29540ab5c6594313dcc0ea2c7619c16038f276c93c82a82aa5be4bac

  • SHA512

    b88f92d3570910cca6e93a0be6cdf69a36944250491fb4eb972950a6c1f1ba5b0d7817caa1ad48d39bb83a3b6e4e07bfe3260095d2fc561cfecfe7eb8ee5ee36

  • SSDEEP

    1536:e2jPogKK86lvRzMEK1Vb87u68WrXhDd6LTqOZzSv8:9PoFLdd1Vb87uiXhgqOZzu8

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2