Extracted

• • Target

    c735c657b913747ba41f2b11498e8c0e138cbcd852c52540e17cda2a1ca8ea52.exe

  • Size

    34KB

  • MD5

    7c5de7e27718249128aac31f4e3362ea

  • SHA1

    657e27b260171842d7104fd0af778530bea3f8c0

  • SHA256

    c735c657b913747ba41f2b11498e8c0e138cbcd852c52540e17cda2a1ca8ea52

  • SHA512

    2ca4275c1ee6c91b1014629f8f4b8bf7db048680b5e72e529ec537d2d4b21eb43418d7ff7626fa07164c2eb88186d169fb3ed90d839146edc87980f224dedccd

  • SSDEEP

    384:6DxAXmqVlxOli1rJ2tK6mnRGwnBLmiOHCwvHixdTEgVR8pkFTBLTIZwYGDcvw9I1:OAXT2ts9tAHC4C7V9FZ9j2Ojh0/cI

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  behavioral1behavioral2