Extracted

• • Target

    XClient.exe

  • Size

    34KB

  • MD5

    d0c8b1d2b66ac787bcdf240539eb6efa

  • SHA1

    156972e8ce9b6fcb0221d6180b964ab1037202b6

  • SHA256

    d329597dff93a3c57c56347c63f86e32af32fb403926c803f8fff1fb3917b209

  • SHA512

    cad2eba4bc3c9d476f6f50a031caa6380dadd18272dd469be003a624b9798949458a12b3ad016808eb048fd44f78519e4b9b1546f8549b5065c1bc9aa029bb0f

  • SSDEEP

    768:gH+65A2tPNhzIgtoFk9Fy9Y+OjhJ/Vcv:g15pt0gtowFy9Y+Ojbtcv

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2