Extracted

• • Target

    f2240b41707827837c75e9e49c0bf037ad8ef5f27c0881d7a9e5f91ff5be0ec9.exe

  • Size

    147KB

  • MD5

    d6f4ad8193bd05288ca89b002019d6a6

  • SHA1

    db56d0d63b59a8b1c055c3d487c05da95a1fcc45

  • SHA256

    f2240b41707827837c75e9e49c0bf037ad8ef5f27c0881d7a9e5f91ff5be0ec9

  • SHA512

    5a37fc33c96cbf433888b65488c6354ba91fd41816940bc5c106f288ceb92408eae1f956e32b6c5387bc2628149d6bd7772ceaaf5d1dade0db6b12f5f5dff9c4

  • SSDEEP

    3072:7OFE9eVOjX4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvpm:8E9TgVqwlL/

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Adds Run key to start application

    persistence
  behavioral1behavioral2