Extracted

• • Target

    XClient.exe

  • Size

    55KB

  • MD5

    4140f1ffff2d292575850455b9b58f18

  • SHA1

    3aa8c69836bead5451d36edf7c5f73503ec1a60e

  • SHA256

    ab79f930340b814f635fe6be28dcfcd8f014fd451f5b286c67f53583c2b71fd2

  • SHA512

    877af6d8c4522aad85f30eb42bb1798ffa8d3037eac9240f599d19306f0e708887957e32affd28df4025faf0c47cad02ac3883aaa55c51dfda70c08a267514ce

  • SSDEEP

    1536:KXAdYTkwHVm6PH26yyj9zbmnhuSM0C5h7DHiISO4UdBR:yAY5Phy89zbmhnHCToO4k

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2