Extracted

• • Target

    lol.exe

  • Size

    62KB

  • MD5

    4432ac562fadcd618ec867336385abbe

  • SHA1

    5b3dda78b84ccfd94bb61c894b0f79cbba2ac508

  • SHA256

    679e364617b6e851955ea23c5c93b13581c9aabb430e3f88a48bd00f70aaeb2c

  • SHA512

    521753e83c850bc6fadfc6d97430af1038552f54c93597f733f876d7a9c16a6aafe3b775bc93d9cf06cb298439f9504876af74359fed46fa95496e775bad069a

  • SSDEEP

    1536:7UNiQdD1WNJAnj+bssz/8SsfInVcBmOVhD88Gf0:70yNWnj+bss4vfInuBmOVhDY0

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2