Extracted

• • Target

    SecuriteInfo.com.InjectorX-gen.27630.11355.exe

  • Size

    5.5MB

  • MD5

    d66272143362242811fc9849c98b47b5

  • SHA1

    17194970bbfe4ef0402f413fce909c3ae57e5342

  • SHA256

    c29d978e33e1d80eb188cff6ebebd0a576480871a0c173f8132a7b14383a50a9

  • SHA512

    9aa0267466e63c69c651a5ffd9fb0ea8285bcf7f6b6a2d72d53e8af04c8077aca2b4839d5721a9ec4a3a55a4a6675cc4e1a9950ae4f85e67bf9b6e19d1a772dd

  • SSDEEP

    98304:BRz6DQoEsUW47FR0mk3V0fCYe4mb5l74eZN:6DQoEsUW4wD3V0aYe/D

  Score

  10^/10

  xwormdiscoveryrattrojan

  • Detect Xworm Payload

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Suspicious use of SetThreadContext

  behavioral1