Extracted

• • Target

    b88c6884675cdb358f46c1fbfeddf24af749372a6c14c1c4a2757d7bde3fbc39.exe

  • Size

    75KB

  • MD5

    1ece670aaa09ac9e02ae27b7678b167c

  • SHA1

    d98cffd5d00fe3b8a7a6f50a4cd2fc30b9ec565d

  • SHA256

    b88c6884675cdb358f46c1fbfeddf24af749372a6c14c1c4a2757d7bde3fbc39

  • SHA512

    ad8b877261b2f69c89aa429691da67100a054006504a2735948415eebdc38eba20f923d327347560d066e65b205e80ea8f0a296e586107dc051d9edc410b40c5

  • SSDEEP

    1536:ymvAmjmeQw5tYlFobzcU9QN7Xxwtrw8W49cOYfpLVHgiL:bbzcUwKtsDnOm5L

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2