Extracted

• • Target

    fg.exe

  • Size

    321KB

  • MD5

    724cc4de405ed3db8a91c383cfc89f84

  • SHA1

    45ca40cf798b7b2ea7216dba582d09dc83cd1bf5

  • SHA256

    c6e052c84a0ed1ad7f463704a5fafffcc845e5744a40eadb84867af10217501d

  • SHA512

    2d3a4b342de5760091e6d6b77d5cdc8abad81ea9dea44bbeb37626f399c11d1405fd6eb8e2156330a684e2a3d28f6dd4ff93660816515896dc82f7a1f7d0d338

  • SSDEEP

    6144:PzU2+BjwsX7+LtOKcvGj94+Y2MlP2yOjxK70NTDx9agjjkRE2aMoiFSV:PzU2+FwsX7+LtOKcvGj94+Y2MlP2yOj7

  Score

  10^/10

  xwormdiscoveryrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Suspicious use of SetThreadContext

  behavioral1behavioral2