Extracted

• • Target

    a3f2c1a4136cbf9ecc2b16f266c349796296b7300dc3f5d6f4d50fafe22cf8eeN.exe

  • Size

    61KB

  • MD5

    3fe50cfec20210addc80f500e129def0

  • SHA1

    722be146a7dc2801770f2865ecafee9c70192543

  • SHA256

    a3f2c1a4136cbf9ecc2b16f266c349796296b7300dc3f5d6f4d50fafe22cf8ee

  • SHA512

    1856f153875397e873a84b9b0709c9ec332ff11094584c0b0ccc2616a0990975f3fe104a0cb3bdd6b9e60908e15d1205aa421dffd75a2e98eefc0f53f9a2d78a

  • SSDEEP

    1536:PC1KA2hcrFua7uYHM5zZW52+ZbDoqjf3Npr83jXO8h1oO:PC1KA2hcT7umMhZk2+ZbDFrv8zXO8hV

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2