Extracted

Extracted

• • Target
    27d134ab92d51da2fc611a9c51ec9709b03c24f3415186645064b6659f087e70.bin
  • Size 2KB
  • SHA256 27d134ab92d51da2fc611a9c51ec9709b03c24f3415186645064b6659f087e70
  • MD5 c8edbd8b0807f1dc3a4ecb2085688df8
  • SHA1 404fbcdc5f69516fad1982a018ef039c2ff94abb
  • SHA512 cb1b91cd0262dde8892d4abce4237bb53eb5ec44de1b6a4b08a8bc097a6df162f8925f2044ef22a29c414cd723f7c1601f579d7c51132094a55d7c79cba9ce93
  • TLSH
    T1E841FCC267FA5CDC55C6567FA8926440F1E2350BD42E5610F2EECD9941C661C682D0D9
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  executiondiscoveryxwormrattrojan

  • Detect Xworm Payload

  • Family: Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2