Extracted

• • Target

    Ghost Executor © 2025.exe

  • Size

    76KB

  • MD5

    08b2c2d938237ebdd99c06a0e58f4fea

  • SHA1

    0b7b120cdbec76e8c442ff23c04f3a22e8d3c0d9

  • SHA256

    7e222229236be686287c1fa9228555d9c34c899e7dc2b1d5f091b6a3cdc74e57

  • SHA512

    ca4ded59c6055a76e5077065efda8220bc649d1ecf281cf1d18adf7d0c9c9edcf794cf6ffecd2febb723715342250a3bfa02c187d168a37aa8bed10a7a8e3db7

  • SSDEEP

    1536:p8sefK3TDB41lkyeXhPC5p/DICG8bevlKKARY3nAiaGOg/zSG:yVQB41lklXlC5p/E/8b4lPA0Og/zSG

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2