Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    77KB

  • MD5

    6b073b8294496beefe70a37ede6aee83

  • SHA1

    db575f88e3c15807d77ea5205e049feec3923c45

  • SHA256

    d51f18d2751bd9290bb5fff60836d407dfb1e37ae51cc40a7720c23c6975962e

  • SHA512

    4508384925ef43b245558dd9a3e531f7e1521735a434a69f2a1c5775e824f9e5d8da3ecf5c102457e5461cc5d4d1402191bb45faca8690562a3347af237526e3

  • SSDEEP

    1536:1NaIFF8v9Z0aUi30F3paTa6+blBs7Vk/Uv0mODTWflN:PaCF8vwU0F3sa6+blBsjLODT4N

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

213.122.223.40:7000
Attributes
  • Install_directory

    %AppData%

  • install_file

    KeepassXC.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections