Overview

overview

10

Static

static

10

WizClient.exe

windows7-x64

10

WizClient.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    WizClient.exe

  • Size

    82KB

  • MD5

    9e8cb2a30697f159dd682f30eb35d0b6

  • SHA1

    6847feea46c5985c3b7fd0c1ab50a0b7a170c29c

  • SHA256

    08c756ed35e4123ad8222bcaf0760b5a8889fb256577b122bde47e59719d1656

  • SHA512

    1e72478e00953de68b39a89b5c59274c2f53da4d9b4cd25d00d28f9a1e203896792764efb8499ae58ec3cfebb98a2af43220dbd73cb35fb1c7645aedbde1c798

  • SSDEEP

    1536:EDy1Vspnf2U6kaO5y7qiekHDbMnuIL8r0H6vtOALCP:EGnKADOJsDbMnm0uOcCP

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

wednesday-knight.gl.at.ply.gg:1234

0xF488F3FA5541d79f0b1945ccA834cD6d939dD864:1
Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WizClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections