Extracted

• • Target

    XWorm 5.6 Cracked.zip

  • Size

    24.2MB

  • MD5

    353c221103efd60bd38f1625a21c80d7

  • SHA1

    414e3eb44d636a628b455a4d8b2997cb06564f14

  • SHA256

    e0be40f12d3b6dfee674688d514287be2dbedbd114ec37356b610e25996ac9a4

  • SHA512

    2d94d46d43afaa43b7515f06455525008601c77cdf5663e3f28220917d2c8b7a9ca0423a521edac56fb51e45dd6264168db101018ed4e83ccc0d46a123cdd7f1

  • SSDEEP

    393216:wyazqFXFeuBc9Q+FpI3zDuG9YCMeg7kjuABAKbybbF6s5eNYJkY29QEH4k:wyVFXDBYQw23fkkjGKOj5eXPQEYk

  Score

  10^/10

  stormkittyxwormdiscoveryratstealertrojan

  • Contains code to disable Windows Defender

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detect Xworm Payload

  • StormKitty

    StormKitty is an open source info stealer written in C#.

    stealerstormkitty

  • StormKitty payload

  • Stormkitty family

    stormkitty

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Executes dropped EXE

  • Uses the VBS compiler for execution

  behavioral1behavioral2