Extracted

• • Target
    https://mega.nz/folder/blYnzALD#_56pA06zNhwSlK_Q9perNg

  Score

  10^/10

  discoveryexecutionxwormpersistenceransomwarerattrojan

  • Detect Xworm Payload

  • Family: Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery

  • Drops file in System32 directory

  behavioral1