Extracted

• • Target

    8c64c26eb8cfcdff10ce0257844fdac96370eb232f9695b88ad5244d5911032a

  • Size

    42KB

  • MD5

    9d66f6870f97865ba8b0488b0dbeb1ae

  • SHA1

    a1efdaf1b198791b0dea2a22dec98769142c8063

  • SHA256

    8c64c26eb8cfcdff10ce0257844fdac96370eb232f9695b88ad5244d5911032a

  • SHA512

    8854c68341822e8c0cdaf2f2a53fbbfec9ab5c62ab4d13f6b8e1e3ce5826a824fafbff1749e22f27ffdca6dc8728784bb93f4b4dcf10b1422dea166a9610f05f

  • SSDEEP

    768:HgmhUWodS+GpcURaBa5+E2+/Zkb4Rb/zNOVhdee:AmhUWWacah2+xkb4x7NOVGe

  Score

  10^/10

  xwormpersistencerattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2