Extracted

• • Target

    6d541b80470b217778deb085a330277549536a5fb38ebcb2c10bd4ce23330e49.exe

  • Size

    34KB

  • MD5

    175eaa0e4d2941557c0271ebaf87f451

  • SHA1

    6cc3c759eb5105ea1b82565194af98caa88ce228

  • SHA256

    6d541b80470b217778deb085a330277549536a5fb38ebcb2c10bd4ce23330e49

  • SHA512

    f4a18c301b02868515e97c0225b85546ffd1ba8efa19f34f1e00f730c58e932316d436bcdf7c4d925dbc0581b570e9476cb323d912a012f79e074dbbb495dae5

  • SSDEEP

    384:6DxAXmqVlxOli1rJ2tK6mnRGwnBLmiOHCwvHixdTEgVR8pkFTBLTIZwYGDcvw9Iw:OAXT2ts9tAHC4C7V9FZ9j2Ojh0/cIy

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  behavioral1behavioral2