Extracted

• • Target

    cb5b070c7f9106506e53a4d84c1f7842afa9177d98cf1bf073d06f3a92af22e8

  • Size

    7.6MB

  • MD5

    3df9a55a59cb8b6f13315a47947d9b57

  • SHA1

    1bd5c2e8d5ff94cbda38292508ef0b667397ad5f

  • SHA256

    cb5b070c7f9106506e53a4d84c1f7842afa9177d98cf1bf073d06f3a92af22e8

  • SHA512

    77cfc783008912a2357abed2ce05c0e91fa3957a149856699147bdfcd2ce9c8950e69d08475c0fb1ce406c62e763ae2d6b0d2a92ef5749547708c13eb19a15e8

  • SSDEEP

    196608:dlO/QfaXhb+WVWhU5Dp/A/QUgg2Oy20rxaDN:QIcDp/Ev2OrN

  Score

  10^/10

  xwormdiscoveryrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Suspicious use of SetThreadContext

  behavioral1behavioral2