Overview

overview

10

Static

static

10

xdbabykai.exe

windows7-x64

10

xdbabykai.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xdbabykai.exe

  • Size

    66KB

  • MD5

    574f80e11cd6dbbf20ed6fc1d5ebf986

  • SHA1

    c8cc32715ba8297c7a144423dd147e8f8375baee

  • SHA256

    e37402a9a7192a5c341e38c64713b0f4bf963f44f0d2003a656ed64ef3fd1c00

  • SHA512

    6b40cb751ad6c755461f8959272123224efb5b4245af722c40972d3b333cdd68bda718a32dfd462b1952f1b945f75dc483bd082d2dc0da406affec9fa0bd88a6

  • SSDEEP

    768:Lqpemdo3SEMO3v2hAHWkQiLYEbLf5KSvs+HWK1Pew60J/pOK573ghDJZ04hq:Ll1PM1iHWi5bL4S01Kdb62pOCgl7Pq

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:9999

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    $77wsappx.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xdbabykai.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections