It operates as a modular backdoor. Version 3.1 is known for its clipboard hijacking feature, which detects when a user copies a cryptocurrency address and replaces it with the attacker’s address to steal funds.
Most modern antivirus and EDR (Endpoint Detection and Response) solutions, such as those analyzed by Huntress and Trellix , can easily detect and block XWorm. XWorm V3.1.7z
Are you asking because you found this file on your computer, or are you for educational purposes? It operates as a modular backdoor
Downloading files like XWorm V3.1.7z from underground forums or unofficial sites is extremely dangerous. Researchers have found that many "builders" (the tools used to create the malware) are themselves infected with malware , meaning the person trying to use it often becomes the victim. XWorm V3.1.7z