Extracted

• • Target

    XClient.exe

  • Size

    34KB

  • MD5

    4973f972562e330b4ad967e3004a6f92

  • SHA1

    dfb32a60dccb71d3f8157eec9934d9634cdf4495

  • SHA256

    44af7d6aa16a03819676d12fe57c0c43bfdae6bbae5065d8c7fe075a89357310

  • SHA512

    cf97abdc60dbc7223c3f3c8df2029a0ab24b90d2a14851a7216b2c27ddd70d375a8b47869f2a92490fd099f2fc4d029049bdcb664331c06a9210302bf2566eda

  • SSDEEP

    384:QxXv9qZ/QXokXcjlcTB+Gx//wD7rXVhLHzVdfgkBE2jHu2/58pkFyHBLTLZwYGoY:IXB2GxebHzDyC3/VFye9FsOjh7y6ErI

  Score

  10^/10

  xwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  behavioral1behavioral2