Extracted

• • Target

    ValoMadeByvenus.exe

  • Size

    76KB

  • MD5

    ad18b27209befbbc41ad92f06cc9457d

  • SHA1

    2326a907c614026e77551a95d6552a2e5c4e57d8

  • SHA256

    e2d0984ee4304bc13624d0260a15c465d7ecaf909452acfdd7221e72e776369a

  • SHA512

    cc82c24a841c7bda3776d7c3df2addc415b72b078837b3754642d072e64ff53365ec07d0dd2c6ca9f778f817f081dac82116bd8568c023b746a492e171a4cebd

  • SSDEEP

    1536:/rxA5fxEsD6yB/QAIuooqPP/baX3URnwB/fjCPB5weO1OFdkLlc/:zxAtxE5yVQru9c/bW3Qq/fjkB5fO1OFr

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  behavioral1behavioral2