Extracted

• • Target

    dcd7f802f5ddf4ce2ffe5bda303c916ae37865c9b10ca97f8fe2bcc7c24f1762.exe

  • Size

    313KB

  • MD5

    a28240f6a63d655f50bd4febc028455c

  • SHA1

    f093d774c744c994b2b0e756783093ba7e342575

  • SHA256

    dcd7f802f5ddf4ce2ffe5bda303c916ae37865c9b10ca97f8fe2bcc7c24f1762

  • SHA512

    dec2809f3c15afc0e1acb5cb278e3fdad44c770878c0fea81d9efa76bf7e6855977eb63811f4896d555832e51bba3bfbcb0291ea286b7c394203cee535b8519f

  • SSDEEP

    6144:um8fza8GpKgzK+OUmXAEw0Kd3kauJkZfu+C+3+W4nCjAQJGDu8r6SE:umazpG0gXOUWAEw0Kd3kadf13+xCB1eE

  Score

  10^/10

  xwormdiscoveryrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Suspicious use of SetThreadContext

  behavioral1behavioral2