Extracted

• • Target

    12003cfc75b9d076590abcbe3f960e7b64114f229ace64497d28e260ca01a2b9.exe

  • Size

    315KB

  • MD5

    e16acddcf30e48f1a412228269ec7ee0

  • SHA1

    c431b49d1a8c7154a90fff36f97ff28497d1e690

  • SHA256

    12003cfc75b9d076590abcbe3f960e7b64114f229ace64497d28e260ca01a2b9

  • SHA512

    2894d2e44307386aa7c23ae0093a600247b2bc1d5f0342e48fdce05a52adbe4419c64b6de15105ba942130176078773d4e091a212763151f02f9871b62a42e16

  • SSDEEP

    3072:ktHIcvIdsE+iSmphsQvPb0dwG3birtHcn0UwGqtUH//F+oYoQN:kx131M5GOdtUHMaQ

  Score

  10^/10

  xwormdiscoveryrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Suspicious use of SetThreadContext

  behavioral1behavioral2