Extracted

• • Target
    https://cdn.discordapp.com/attachments/1522970594222674020/1522978901167702197/Stall_V2.2_-_External.rar?ex=6a4a7021&is=6a491ea1&hm=571ea1c651564e1fb9fe1a6669f5b2fa15c1416e7d90d152ee63138a9d7f39e1&

  Score

  10^/10

  discoveryxwormrattrojan

  • Detect Xworm Payload

  • Family: Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1