General
- Target New WinRAR ZIP archive.zip
- Size 300KB
- Sample260515-xmcx9set5w
- SHA256 ab7b3a28842412a03941e38371d8f4f39c0451e9d3639375a570d71498cee1df
Score
10/10
Malware Config
Targets
-
- Target bc4yy0qf.um3.exe
- Size 73KB
- SHA256 28ab465cd81b222ed571f54cd97eb38c1f592cf2929eaec7329d3e8ecad3ad7a
Score10/10-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Detect Xworm Payload
-
Family: Xworm
Xworm is a remote access trojan written in C#.
-
- Target pdh2a1wk.gqg.exe
- Size 73KB
- SHA256 28ab465cd81b222ed571f54cd97eb38c1f592cf2929eaec7329d3e8ecad3ad7a
Score10/10-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Detect Xworm Payload
-
Family: Xworm
Xworm is a remote access trojan written in C#.