Extracted

• • Target

    XClient1.exe

  • Size

    81KB

  • MD5

    0a9f4d282f14147fd04d72b5324b4d01

  • SHA1

    36cdd60967e8daa469bb7f854c326ba5a31e28b0

  • SHA256

    be63578f17dd08b13ff2434b82b57f06cd3abe8e34232ab713e0c4fde7a1f24b

  • SHA512

    6c95e3aaedb3d5c485ac88f84615a23c992ee5ed24d927d7dc6fe2fbaf4616d25e6eb87fa8cad3239a9ae0b405db15140c5377c9eff761cdea6a3accbca3d747

  • SSDEEP

    1536:ZhkdFLQOF7XhgBrxnCMAHW0bqoSkb2JNYjr4cQqCiC7FG6CjyIROr8Sa+dS1EAdt:LsABr27bn7bsYHTQqiB6jROrzgEA6IIW

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2