Extracted

• • Target

    adgs.exe

  • Size

    60KB

  • MD5

    4fdc66a89440cc4b93b69bc9a6461994

  • SHA1

    44e4d1c3d1f23f95b1bb0cc070fe728cc0eecf30

  • SHA256

    5ee2c9118c623b545b9ccfcdea4a2fbb2ce4d3451e86813314035f31d4223736

  • SHA512

    f5422891e771033d4af2feb1f01f64c712f622e621d86a24a988d0ebbd719c30d6b46137e0f3b495489b8daf2f22913911a2d51151377d9359698a168dc380c2

  • SSDEEP

    768:5RRGkbEhelsVOohkt2l57Cw8Es/IO6RHGWUjbAWUuAbLTX7IOahe6zZSY:5RRpEDYmLX7bs/IOdbAhuqX7IOak693

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1