Overview
overview
8Static
static
1WizWorm v4.7z
windows10-2004-x64
1WizWorm v4.7z
windows10-ltsc_2021-x64
1WizWorm v4.7z
windows11-21h2-x64
1WizWorm v4.7z
windows11-ltsc_2024-x64
8WizWorm v4...nd.png
windows10-2004-x64
1WizWorm v4...nd.png
windows10-ltsc_2021-x64
1WizWorm v4...nd.png
windows11-21h2-x64
WizWorm v4...nd.png
windows11-ltsc_2024-x64
8WizWorm v4/Fixer.bat
windows10-2004-x64
1WizWorm v4/Fixer.bat
windows10-ltsc_2021-x64
1WizWorm v4/Fixer.bat
windows11-21h2-x64
1WizWorm v4/Fixer.bat
windows11-ltsc_2024-x64
1WizWorm v4/GeoIP.dat
windows10-2004-x64
3WizWorm v4/GeoIP.dat
windows10-ltsc_2021-x64
3WizWorm v4/GeoIP.dat
windows11-21h2-x64
3WizWorm v4/GeoIP.dat
windows11-ltsc_2024-x64
3WizWorm v4/Intro.wav
windows10-2004-x64
6WizWorm v4/Intro.wav
windows10-ltsc_2021-x64
1WizWorm v4/Intro.wav
windows11-21h2-x64
6WizWorm v4/Intro.wav
windows11-ltsc_2024-x64
8WizWorm v4...ry.pdb
windows10-2004-x64
3WizWorm v4...ry.pdb
windows10-ltsc_2021-x64
3WizWorm v4...ry.pdb
windows11-21h2-x64
3WizWorm v4...ry.pdb
windows11-ltsc_2024-x64
3WizWorm v4...xy.xml
windows10-2004-x64
3WizWorm v4...xy.xml
windows10-ltsc_2021-x64
3WizWorm v4...xy.xml
windows11-21h2-x64
4WizWorm v4...xy.xml
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
149s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
29/06/2026, 16:03
Static task
static1
Behavioral task
behavioral1
Sample
WizWorm v4.7z
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
WizWorm v4.7z
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral3
Sample
WizWorm v4.7z
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral4
Sample
WizWorm v4.7z
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
WizWorm v4/Background.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
WizWorm v4/Background.png
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral7
Sample
WizWorm v4/Background.png
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral8
Sample
WizWorm v4/Background.png
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
WizWorm v4/Fixer.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
WizWorm v4/Fixer.bat
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral11
Sample
WizWorm v4/Fixer.bat
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral12
Sample
WizWorm v4/Fixer.bat
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
WizWorm v4/GeoIP.dat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
WizWorm v4/GeoIP.dat
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral15
Sample
WizWorm v4/GeoIP.dat
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral16
Sample
WizWorm v4/GeoIP.dat
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
WizWorm v4/Intro.wav
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
WizWorm v4/Intro.wav
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral19
Sample
WizWorm v4/Intro.wav
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral20
Sample
WizWorm v4/Intro.wav
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
WizWorm v4/Plugins/Recovery.pdb
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
WizWorm v4/Plugins/Recovery.pdb
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral23
Sample
WizWorm v4/Plugins/Recovery.pdb
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
WizWorm v4/Plugins/Recovery.pdb
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
WizWorm v4/Plugins/ReverseProxy.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
WizWorm v4/Plugins/ReverseProxy.xml
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral27
Sample
WizWorm v4/Plugins/ReverseProxy.xml
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
WizWorm v4/Plugins/ReverseProxy.xml
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
General
- Target WizWorm v4.7z
- Size 34.1MB
- Sample260629-thdr8aht5x
- SHA256 4c709febc184ffe54a70a0c028b55236fc4ce083872b6be25419dc7d58e20911
- MD5 e10f9051177e0441bc8acfdd0e7845ce
- SHA1 4263711ba87d617b12f77ccd57b2b2f083bfb586
- SHA512 df44cca1bec150dd8339595c80285b22955d1771d213bff0315c7e259f71d5a1cea548a7037e6bc53edda6eddbfb584d78bc9a45daf52319d3777ab4efc0bb68
- SSDEEP 786432:CjmCP0C1PLdV6GxPL3MVwVXspziO09aZ4iEmtwCYPiwucdGJr:Ca80CVjVxbMViSmG4Fmtx+dGV
- TLSH T1A0773329B821AE791519A973AB0D1F3877DDDB4FE0500424037CEC55FB396FEA421A8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5720 7zFM.exe Token: 35 5720 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5720 7zFM.exe