Extracted

• • Target

    2025-01-25_22403a447a2ad298ac6c0ae3411ccf6e_frostygoop_snatch

  • Size

    2.7MB

  • MD5

    22403a447a2ad298ac6c0ae3411ccf6e

  • SHA1

    048d197addc2fc6b21396ae59a2356f73c6849ed

  • SHA256

    c94ed5203e2b65f5c0a198eff5a9d2d5b63d28a10dd5cf7f02997699b3ed3b41

  • SHA512

    430f4c95d67170dfe6cd8128a7af162fdd4465f1749700be386856ca44854405ea8c8ad56402c812410e84d97e9fdae7e272e6a694bb88333f0a9971520bc7c8

  • SSDEEP

    49152:N2Lw7+OiV22jWCFYz1d1AdtTySZf0K8lf/e:ELwSinsNZMblf/e

  Score

  10^/10

  xwormdiscoveryrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Suspicious use of SetThreadContext

  behavioral1behavioral2