General

  • Target

    WizLogger.exe

  • Size

    61KB

  • MD5

    32d4b4b98dd2266d192cd68584c4ba3b

  • SHA1

    1a981f092b337dee9f97ca468342dd8ac306700e

  • SHA256

    45f154ca4feb278643ffc6fdb591a01cc0b07e9694e107d7e133f6517f967a73

  • SHA512

    5d74899ff395ffb9b44fa53304bdbeda30a3f547c9ee1d779a15aa60cc37b404a59e3e4efaac9643351a35fcb365d5a93edd04f326283690860fb2791834d463

  • SSDEEP

    1536:3pxN5s40bzR4dwzbq50zbpKJjK0ZRZ64Olx6wMtE:3O54Wzbp7mhOlx6rtE

Score
10/10

Malware Config

Extracted

Family

xworm

C2

told-contacts.gl.at.ply.gg:8787

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WizLogger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections