Overview

overview

10

Static

static

10

WizClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    WizClient.exe

  • Size

    69KB

  • MD5

    c0680e9c5708ff5c604a046e57280cfe

  • SHA1

    88c62c04f24512f486c0cb1ec8fd4014d4c1039d

  • SHA256

    c023d408e6309205752585f25332bc453b4d5ac911b8d1da59efe46cec4222db

  • SHA512

    6701094c431062adccfdadc2e9537c6a9f12a6b27acd73e47e6cdbe065d89d038509abd34fc0e1eaa5e52eef0625a4f91fe8bee48303928be18005555a72febc

  • SSDEEP

    1536:fvZ9bVBVAHSYjiyLbin01Tz6wu/IQ1bSBOd4stN:HLVADLbinhIkSBOdjtN

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

mode-clusters.gl.at.ply.gg:36304

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WizClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections