Overview

overview

10

Static

static

10

WizClient.exe

windows7-x64

10

WizClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    WizClient.exe

  • Size

    39KB

  • MD5

    cf3f6719e673f32e22732db1351a683f

  • SHA1

    82b638957632ea6e332071c34036fa574360dec2

  • SHA256

    cc2e4bbcc2136e04f76253efbbf3a8b9f62358c339d2c4826a3ae2e115308c8d

  • SHA512

    2bf1783f3877c0aa2bb31249e94147d52b4e4cd291ec60ab6f74f011bac100988e4588d9c2d0107a810b20738634977ca09e573f6e090ed512106e35a7087889

  • SSDEEP

    768:jPfdKI5RExEI0FWrWU1wFPX92OO9hAG/tO:jA8kSUaFf92OO9tO

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

93.183.95.210:5552

Mutex

CyuqAZZVNkR3PuCK

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WizClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections