Extracted

• • Target

    3770fda3571c0480ab2ddffb03c5fd30a063989e62b622f35b7cb850b073ef84.exe

  • Size

    66KB

  • MD5

    1e147f6a2016797ab2a37242e8bd2043

  • SHA1

    c498f49f624eec6253b3cea763fb88e269eee61d

  • SHA256

    3770fda3571c0480ab2ddffb03c5fd30a063989e62b622f35b7cb850b073ef84

  • SHA512

    99f9b17bcb0338b2cb0d7cf7bd44f719a618ad413f3fbd852eda54291b7a72fe0f04b56fa7d6f43fb23bf30a815b81ad416974fe527b34ecc7685cbeafe96bb2

  • SSDEEP

    1536:Lmaqo8oFLXQpShesWwbY5VEp0+Ua+bQEPmlZDhwIx2OEKu+Op:3veQ6VE2+Ua+bQf/aIsOlkp

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2