Extracted

• • Target

    xwromtestingdadasdasdasd.exe

  • Size

    70KB

  • MD5

    ccb38ce40ad2864070836a593d9458ae

  • SHA1

    00cccf5e57031e3608a0fb7e76c3c66e70b85621

  • SHA256

    9d4df061b0d907ed1e83ad2d3c92fb9e7166d67291abac9cf4c300e835441f9a

  • SHA512

    bab252386ad16322f65fd557c90a3990562422ff6ced4449b59288060aba2a935994e00ee5f1bcc5a943e425982b20cbe67e62b37991b9ef43fe55e671137a40

  • SSDEEP

    1536:kgqAVpgpUJHLCnprTMFbaoGq+2/6yxUa/6OhH/W9:bVqpsCpkFbaA+6xUa/6OhHe9

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2