Extracted

• • Target

    XWormLoader.exe

  • Size

    62KB

  • MD5

    f12257a215c6546afe0dd7a350186de0

  • SHA1

    15db08fe43afdd313b30ac7de033fc2509e4cf01

  • SHA256

    72861bba392267caba0c88e11cf5a214f42ecc83b3d1672d57a017351141fa09

  • SHA512

    ea70ba774fdae41725f1983dfe712f4c7b92047969376ab85f06d38f342d62b4d42bb4dec6dec0df658bcae426cbc8d1a7214f45d4c595e65e52a334b43d3637

  • SSDEEP

    1536:luHMEoH3Lp5XrxibzLCm+breBkmpRMMSigaOO9igk:lYegzLCm+brEpKMSilOyHk

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  behavioral1

• • Target

    Xworm V5.6.exe

  • Size

    14.9MB

  • MD5

    56ccb739926a725e78a7acf9af52c4bb

  • SHA1

    5b01b90137871c3c8f0d04f510c4d56b23932cbc

  • SHA256

    90f58865f265722ab007abb25074b3fc4916e927402552c6be17ef9afac96405

  • SHA512

    2fee662bc4a1a36ce7328b23f991fa4a383b628839e403d6eb6a9533084b17699a6c939509867a86e803aafef2f9def98fa9305b576dad754aa7f599920c19a1

  • SSDEEP

    196608:P4/BAe1d4ihvy85JhhYc3BSL1kehn4inje:PuyIhhkRka4i

  Score

  1^/10
  behavioral2