Extracted

• • Target

    MasonClient.exe

  • Size

    47KB

  • MD5

    2c8f88e34446781e1a4d201c173d420d

  • SHA1

    c376cdd4aebccf20e85b799e9ceeeebafa77bc83

  • SHA256

    f2f027c21e90d41a12cfeacc16b07216a85eb17d3d4b39fdc51fe3143c8dde46

  • SHA512

    51662ad30d27268435be6fefa779932be47151b64476a1b8a48e74011140e555a377063c5d5ee3eb6a71f4e12979f3f37aef765122c8de9927cb7220fd1da7d7

  • SSDEEP

    768:ln8y5X66Owo6hEfizVik25DTpvghbrivo2g7KPYxJ3AbiOmb00R9S34u3JceujU+:lnD66Owo6hEfizVik2BTpvghbrivFgmI

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2behavioral3