Extracted

• • Target

    xtestv45.exe

  • Size

    63KB

  • MD5

    2b75847f7dca3ad777515c4c43c15710

  • SHA1

    90c3ae3a9e90d2023502984e66c006577573f35a

  • SHA256

    6eab502dc150b2a9dfe70cf8e3407ee5142737a07755845a63ab1ab67cd00057

  • SHA512

    ac923bc1291ad7576e5853f70900c9244b61f892c5b976dc13134f061080b5c3638f5f6635e94466e4412dd8db2e2f38f1b326144fbf35484adc0e4b96ac3cb2

  • SSDEEP

    1536:D6CSV9Df/JUbw+sNII6F+kpfOIK3csd9fjR:GCsnSbwvIr+kpfOIK319LR

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2