Extracted

• • Target

    67799610af5d67923cc07cd9860658c50478f9aa7bc75bc98b675c00c9815b4d.exe

  • Size

    669KB

  • MD5

    6a62c439e051069e1524327eb0514b96

  • SHA1

    7017df43d65dcf5e5ccb42b7c5683cdfeb3b6eb6

  • SHA256

    67799610af5d67923cc07cd9860658c50478f9aa7bc75bc98b675c00c9815b4d

  • SHA512

    7608223fce2dd8f9e200abdec6161c608139412aa650c754d51772d003d76e5c500fa05627e5a8cee40ac9445aaaa5a2fd05914cc02f0ea52b3555c11eacdb14

  • SSDEEP

    12288:vh1Lk70TnvjcH543dWjk9hd6kfKs3LmruGCb46pF4/:Lk70Trciyk9H6zyLi1C8U2

  Score

  10^/10

  xwormdiscoverypersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Adds Run key to start application

    persistence
  behavioral1behavioral2