Extracted

• • Target

    c20b8310236fbd95f3797f5d24018c42223fbc9637a5c03b2242792ffe622832

  • Size

    175KB

  • MD5

    4b20cefb26c1629cb261223957f7c8e4

  • SHA1

    734d646a7e66fbd022d77e1284725e7ec49d4b78

  • SHA256

    c20b8310236fbd95f3797f5d24018c42223fbc9637a5c03b2242792ffe622832

  • SHA512

    fe213ef529af9c9389e20a86fdd78dd0ced4602b5eced243de9c3248badd0d486fae6a1abf53032aa5de5b9759394ed1845823386f1725293a035cb18ad7c383

  • SSDEEP

    3072:7nqYPWR1Wwkb6Zwpp9O/IYm4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvp:jqxUbmwPCmgVqwlL

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Adds Run key to start application

    persistence
  behavioral1behavioral2