Extracted

• • Target

    Delta cracked (1337).zip

  • Size

    35.9MB

  • MD5

    257c597061d8d887671a85fc6ccb1d6b

  • SHA1

    ddd2ae6bfc2e4d8ab778b914b18b162b049ae807

  • SHA256

    efe289b38f29032f648a26974cca1c68599a7e24f0cb58e62fdc9e79b4d3c3c2

  • SHA512

    9ea0b587f75bb9b52f2f70ebc781bb23420dbe64541a7bb6544836169771070b76c4cf57cc2fd8bc8e0dd8f7bf44df27535e229fbf7f6441efb5de6ab4531757

  • SSDEEP

    786432:Qj314x6Lf72SddZU7uKuFOu/fxAvIWXw7GmnuEhI7mNn5QSc:Qjlcuf75ZU6VtfxAvkamnu77mNnU

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1