General

  • Target

    WizClient.exe

  • Size

    57KB

  • MD5

    ac182e65343a318e01bfcc4f2776066f

  • SHA1

    10389cd9462efa2c1efd9fc2d506148094d608e5

  • SHA256

    4820f1d14819eadb59680f7ffff3bd6b11a4a647e12117f277c969b62c74dbb3

  • SHA512

    fbf21a34867ce84f96a4129c610bc4f654bf62411f373c60dcb62b096ae375fcb86f25d62275d01059680e049c8b4709fd06dbd4cdb80d4fcba994cbe7c4f9aa

  • SSDEEP

    1536:G2q36yablpkBsCfeVHXTb4LAIW6j+dOkDbdJtK:GUl2+CMXTb40IadOkvXtK

Score
10/10

Malware Config

Extracted

Family

xworm

C2

told-contacts.gl.at.ply.gg:9726

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WizClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections