9631f7420742f9fe4113e4a278ff8e460f5734d681863e10f69773919fcbb1d8

Sharing

Copy URL Twitter E-mail

General

Target
WizWorm V5.7z
Size 47.2MB
Sample260710-dnlf9acw3l
SHA256 9631f7420742f9fe4113e4a278ff8e460f5734d681863e10f69773919fcbb1d8
MD5 2e7bd6fc9d5e51fafb7e0e9582367ff9
SHA1 4a47558cdaaf2371de006358db92f84d5ece934c
SHA512 be5f09427bda532487399a62dcaab345c45e192611a29ee6b146956866088b9dd444e7593b0dac16addbcebb932dfe9698c64a8d33d610767ccf4c962491722e
SSDEEP 786432:kPBjd5ckVCp3zZWnq5+sfxgpeEJfi2IjEYtaMHHVjVIgvUUJXUV+HuUbC3FEVKQo:kd7VCpDMnQJGrfi3j1aeHZpv1XUV+Hmd
TLSH
T171B733B07E5EB2FD1A0E614C660F57671F14BD520AEEA21EC1B1C6357C6E0A5A323B43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  WizWorm V5.7z
- Size 47.2MB
- SHA256 9631f7420742f9fe4113e4a278ff8e460f5734d681863e10f69773919fcbb1d8
- MD5 2e7bd6fc9d5e51fafb7e0e9582367ff9
- SHA1 4a47558cdaaf2371de006358db92f84d5ece934c
- SHA512 be5f09427bda532487399a62dcaab345c45e192611a29ee6b146956866088b9dd444e7593b0dac16addbcebb932dfe9698c64a8d33d610767ccf4c962491722e
- SSDEEP 786432:kPBjd5ckVCp3zZWnq5+sfxgpeEJfi2IjEYtaMHHVjVIgvUUJXUV+HuUbC3FEVKQo:kd7VCpDMnQJGrfi3j1aeHZpv1XUV+Hmd
- TLSH
  T171B733B07E5EB2FD1A0E614C660F57671F14BD520AEEA21EC1B1C6357C6E0A5A323B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  WizWorm V5/WizWorm V5/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  WizWorm V5/WizWorm V5/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 f5f4717bb0e03f63affd8a628f7e98ec465d7919cc462422a0eff7fd46952f0a
- MD5 1647e0dc1905e90d09c92095d1602bc5
- SHA1 fbed48d3f518d677fa8dddb620147a97e31b8482
- SHA512 f1b962cec998dc5306ad35a57be8d6583af31329fafb77a9f8ec1df2b317da8f7cb861c9e760ce79769a5bf580e940bc771412a8c1e8097dc81592dd2e35ad2f
- SSDEEP 384:WqIGejCx3hvND6PEfcodT8Ft0Y7XZ3d6D4r:WqIGeAlDzztYZ3d6D6
- TLSH
  T15D623A55E3D44335C2FE1EB24C3353401B70C2099C53FB2E6EDC7056AE63AE98A95B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  WizWorm V5/WizWorm V5/Plugins/All-In-One.dll
- Size 4.8MB
- SHA256 bb7e8961926cbe67902bf30ede21acdf2a316fcb058d0015fc99ab744185860a
- MD5 c192797049edd7ab65d9a18d66e34b7f
- SHA1 c2a1b6a9a4e88c3534976adc2590bfecebaf96dc
- SHA512 cc03a1a5348341ad3e37582d75c9091ee3adbe4448a741f222e6068659e8c9908e34958a8e8f3ea9e9b01471b9a740f0a1ba25954566b6b0dc465983088007da
- SSDEEP 98304:bl19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtdI:X9FPRkC8C9OH7c2ilInz0kfVo26Wsd
- TLSH
  T1963623187FE18717F6EF97F0D5A2420A97F4E097B356E79F5E8484E9388230089262D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  WizWorm V5/WizWorm V5/Plugins/Chat.dll
- Size 18KB
- SHA256 d88cb156d9494365fc978338a5e9a3ec1a847454cb90ad56feacc49ba2a39ea6
- MD5 0ba3ba179544bc25e95505dfcab58a37
- SHA1 62a43dafb5c38bf9efc16a5d8e06e00d43b2fe13
- SHA512 ec376917da4cf83770aa4e0843ce4353192e4bfcb068792f8a99d66b9e33feac091a34b0b7731efa815f6bed8eeab8ffaf79aecd1776bef5fdea250a9e4250c8
- SSDEEP 384:mUeLD8aDbXCtSewu51smLUAJb//crwTKvt0GIKoI4fiUWufp:pkbCtSewq2mLlJ4r0HI4fiXi
- TLSH
  T12C822A299398C3F6C6FD2BF65C7196810BB1D211DE03FF2E9ECCE06A59A37814690791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  WizWorm V5/WizWorm V5/Plugins/Clipboard.dll
- Size 14KB
- SHA256 b22b0db4613ee30f99a584958463df9afe3df69ec06bb82e0b8a7eb4c38f7f10
- MD5 24344dfe160fe8b833597835b44754e2
- SHA1 afdf165627a9345235cd66b73e67b17fbe21ef41
- SHA512 7abdc8629ee047d811941785e0635aa410e4ad372346e7dee0551825d88bf32f1dd3e88b7628263386ae28106da8b0e9e69ba80011c4308605c9215143748e13
- SSDEEP 192:sXyVpJloIn6qxCxYAROEWxJ+e6OiASPWPOFXgNTen1i9iY6IW1mX/60/EDcM7Rwy:zVpdsQMxAAGUSTe1oi2X/6wMT4U
- TLSH
  T16C524B69A3D4833AC6FE1AB30C7392801B74D7159D43FF2E1CD860A27D6359987527A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  WizWorm V5/WizWorm V5/Plugins/FastColoredTextBox.dll
- Size 333KB
- SHA256 3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519
- MD5 b746707265772b362c0ba18d8d630061
- SHA1 4b185e5f68c00bef441adb737d0955646d4e569a
- SHA512 fd67f6c55940509e8060da53693cb5fbac574eb1e79d5bd8f9bbd43edbd05f68d5f73994798a0eed676d3e583e1c6cde608b54c03604b3818520fa18ad19aec8
- SSDEEP 6144:4FErOIif3RzSHh+20lXs1TzCeBcQeDbNlz7:eEeR52bmeh0n
- TLSH
  T1D274292422F84665E27F47BCD4B5A000D3FAB53699DFDB4E8B64A0DA2F63340D526633
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  WizWorm V5/WizWorm V5/Plugins/FileManager.dll
- Size 27KB
- SHA256 d7b44604cc800e6c906553950aa42758a1d7c8993a6f027cce4372c5e6e0e43d
- MD5 69ad4300f9a66ce1816b0cc093578c1d
- SHA1 41cb280797120ec7fd22e7594b9200b0f0a5477d
- SHA512 f340a58da0a4321dace9db2f225ecccb49a7333241160a1d5c0a4054459493b9219e419504969a04c22601cad44b06c027358fc3d625df43a3b374228608c51a
- SSDEEP 384:mJEyxW7xwE/qS106519SVzajDL9jz7Owkxqb8cl/hsutzgk/b7oBrklCHvIsC67G:MxW7xwIL9SQdzNbHV35mXC6C
- TLSH
  T13EC23BAE3BD08221D5AEC9B248B391080730EA03A923FF5E5DC8719E5F735C24E557E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  WizWorm V5/WizWorm V5/Plugins/FileSeacher.dll
- Size 478KB
- SHA256 b322e754decb02f691429358e1e37ebe18dfa728a86efee9ce50ec0705765219
- MD5 e8b0c7bffdb7fbb2eb48fae2b86ee2ef
- SHA1 fb1ab0c793619a0bb23db9867b6130e7eff9c1d2
- SHA512 1d8f47a833b105c9fc85343bac64f80eb7b8d67a0f41144f13a7d7ac293f70d5db81f39e0a53b4e0fe44a300230f8138b8a84baa04542f5a1ad2c542ffb54dc9
- SSDEEP 6144:N665TzPuEAIQQWzneGtSV41QJDsTDDh0Yhe6dwxLV/fuhg9+ej8o5cl:gA2EAIulS4Ys50ie6Cfyg9nj
- TLSH
  T161A48D412BD9CA5BF1BF27F2D0E261A1C7B0E465A52EDF8F5D8424EE1C13340A9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  WizWorm V5/WizWorm V5/Plugins/GMap.NET.Core.dll
- Size 2.9MB
- SHA256 58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
- MD5 819352ea9e832d24fc4cebb2757a462b
- SHA1 aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
- SHA512 6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
- SSDEEP 49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
- TLSH
  T152D5234D77FC068BF5BFDBBD7870069A8331F106AA37E30E15A154A91D23B818851BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  WizWorm V5/WizWorm V5/Plugins/GMap.NET.WindowsForms.dll
- Size 147KB
- SHA256 741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
- MD5 32a8742009ffdfd68b46fe8fd4794386
- SHA1 de18190d77ae094b03d357abfa4a465058cd54e3
- SHA512 22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b
- SSDEEP 3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ
- TLSH
  T1DCE3BF6173A58D2FD6BF4BBFA46240C1A371E603F602C38D6D8820ED2897F5587523A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  WizWorm V5/WizWorm V5/Plugins/Guna.UI.dll
- Size 876KB
- SHA256 fb23fa4fca8f28bebe7b7e39593a211cd3c3405de5f948ec520e859b1bcaf91e
- MD5 6d6a1f28978d42ad2f0a8f278eaac966
- SHA1 b09168ec88109422ca29cf4f1b6462d51930873d
- SHA512 76ddf88255a9355fc3c781880e23d94206acca4decf5623712411f7a733e91ca9ea37944860401cf9667f10e8c33a087803a4726f91faff1f23e3e0592ddf41d
- SSDEEP 12288:bXlW6JhG2lO8FbG5byJR//uXShuqO3daKScHj/mTnGS:bE6JY2sYS5GJRuHkcHqTnGS
- TLSH
  T145155B6577E4D99BC05987BA503346E86B74E004BFA7F34BD419B2AC0ECB3AB1C19943
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  WizWorm V5/WizWorm V5/Plugins/Guna.UI2.dll
- Size 1.9MB
- SHA256 c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef
- MD5 bcc0fe2b28edd2da651388f84599059b
- SHA1 44d7756708aafa08730ca9dbdc01091790940a4f
- SHA512 3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8
- SSDEEP 24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw
- TLSH
  T1EE9508007ED0DB26D16B4E33D5E75010D3F2B4A26BB2E70F72D5A77C145378AA88A366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  WizWorm V5/WizWorm V5/Plugins/HRDP.dll
- Size 1.7MB
- SHA256 522969869de9da57de0df020154a05426849e4edf34edd2141987b5208aebc92
- MD5 c6ee2137009b79113f44442af857996e
- SHA1 81a6f57a5cf46b29ee63644f3cb85d1a810043a4
- SHA512 c30da3e980d78fd1923b0f100b7f7828ec02ebed86030d0790ce6734bbdad997a8880df868ff56b33fdedf09f407e55249012801149653620a74c070f51bae78
- SSDEEP 24576:crKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:pHZ5pdqYH8ia6GcKuR7
- TLSH
  T1E9851918F6D8423ED857D2359A7153B2D7FAB9482F20738A2928075A7F2B3D02B3575C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  WizWorm V5/WizWorm V5/Plugins/HVNC.dll
- Size 58KB
- SHA256 05bed2b7a60900f91cdef3b2e37acfdb8e8d4b8cc213a3f4365e3eabfbb82eb9
- MD5 09b00fd907ae543b41339c0d9d388897
- SHA1 57679b332a6bb775a1c97d6c8265ae13bf14dcd0
- SHA512 85890443a391e0c52213494d5b337108d8166b51635b470bf344999895ebfcff17aae2754c0eccccf6a18f5ebab8e048d2d07cd4251f3ba9ad897bce5ef9d2ae
- SSDEEP 768:1rYh9e3lgPdTxoz12BWR74mqWCVUWdbgFmcivgZp29CNy1oj/90QoGIgVWbU+:uh9e+Tyz12BWR74mdIaBs9X1oj/MBe+
- TLSH
  T125435C8567E88630E1FE0F76887357108771E5675913EB1E1BCAA0666FA33828650FF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  WizWorm V5/WizWorm V5/Plugins/IconExtractor.dll
- Size 10KB
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- TLSH
  T179223809E7EA4B37DEB7873654134656E334BA10994FEF5B05CA50642CA73A00B12FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  WizWorm V5/WizWorm V5/Plugins/Informations.dll
- Size 22KB
- SHA256 331b6ae1c6fa89bf3967969b2fe077c7f04018e957d2122e501c92087185a3a9
- MD5 7e4c77b6a1e1715c5b9f127ea7dc357e
- SHA1 bab39b218e2b0542fd8aa397e14fb23b384c62da
- SHA512 445f623429be4ebdb31a55e7e32b40ee7282c7147911315b68062dd023444d1c5b03aa53c4c4aa90109fe363982f43979072baac9ac9cbe54843fe49c3ada290
- SSDEEP 384:dnQf5APE80e6vT1YPsec0n3TmoNhxJNSsFD4pfZcd:dnQfGPEgPseFj3NSrZE
- TLSH
  T13EA2095877E942A5D2FE2AB20871914103BAFA0B5C13FE2D1EC4929F4D73784CA54F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  WizWorm V5/WizWorm V5/Plugins/Keylogger.dll
- Size 17KB
- SHA256 760930f14aff46ab8d9f8a685eecf58af86d66fc0a7ee8167c6ade271656bc8b
- MD5 d03f1a11d25dff9a33d0ffda71ceeb7b
- SHA1 8e2be41057ba428ca5a5f6b8a05c5cfb18f724e1
- SHA512 2fe47177660ff6c282dd86dbaaed3d97e323afbd1e2fc6dff2b58a8e333225d79d82cb940aa7bc61bc4838b49a08625fcf8fccf58d00d625057dd77d5f25138a
- SSDEEP 384:kuDdYe4fbfqvNI2tMO4UNWD8Up745FyV:kuDlObCv/WVNpYI
- TLSH
  T148824C0DB7D48275D6FE2AB64C73634017B0C204A807FB2E29DC625A5EA3BD94750B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  WizWorm V5/WizWorm V5/Plugins/Maps.dll
- Size 15KB
- SHA256 855b20425bd494e2592266852a95ef5a70cc52c9d7c156d7e90fb9cdb728478c
- MD5 4e69250fbb72ee71e4dd0850767b6d35
- SHA1 e69383066b9069f634c6c2a6711fc0c56f2f8d2f
- SHA512 12d43e83590e6089a178ee110098ca8721353285beafd269aad54c1c63036abb62084982a15f0d36c73803dcc3d60d24e770770b744cc59b20d1e66328421b11
- SSDEEP 192:hzW/qqmhqfohvOn4iWmyRitNK7gGte31HC9T6IW14X/bQOI03t2PL2A2:iqqmhxvY/4jteFi9BX/bJt1A2
- TLSH
  T121624C16D3D48272E7FE0FB35C72624007B6EA05CD07FB5E25DC605A5E2BA928E60772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  WizWorm V5/WizWorm V5/Plugins/Microphone.dll
- Size 540KB
- SHA256 a77f52f4acc28c8068fb6ae721c7ecbd4f8b08c7fe35ab971b11cf85ff905c37
- MD5 3315c1d1cec747b23d3cff03155a04cb
- SHA1 02baa2ab544d246987bb34fbf93f0f45b43bf42a
- SHA512 8f7cdd48c7cc061296951a2611763fd394dc9c135ab254b1232d954bf7e16ee7d0cd9a498f1543c3af902484f715ae1cf3cbc4d9972ecd9bcec96a9a9dda27c3
- SSDEEP 6144:dnbwHuM1Gmt1mlVMyobvo7MWDtPPfb78+Ommc8hCgF8OQssY3t2KE9akHs+2HoYJ:F8HtGmClxobwXbgvha/YEucYvnvuAce
- TLSH
  T1A3C45C11BFD49567D06F33B2E0E20F2E57B5E44AB326EB4F05909AA85DC7B825C017A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  WizWorm V5/WizWorm V5/Plugins/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  WizWorm V5/WizWorm V5/Plugins/Ngrok-Disk.dll
- Size 7.0MB
- SHA256 b2cb1232849ace82087c95942273aa8a10c22ad473dca263078d461c57b5379e
- MD5 7d89104b023e7dc05006c008abdb81b4
- SHA1 28ea9561beb2f1292a1a663dc4c6bad2cfc50312
- SHA512 b74f036606de8d4215674f2d0a330d8610963058636f70c7a4d0dcf75070bc03a63696284f53df02ccf23d7076a286ce75989fd4f729187554e2a92945c485af
- SSDEEP 196608:XCsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:XTED7/VEqt/A3TryARj1BpwLktl
- TLSH
  T1A07633287BD48167F7EF67F1CD92414A0BF46017B29AE7CF19DA88FE1D81300992169B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  WizWorm V5/WizWorm V5/Plugins/Options.dll
- Size 24KB
- SHA256 6449a53ce063f3f7083eef7cc5716533e8465cb60a07882b31df6468c32d962d
- MD5 198cba5cfcf8d2c356fe79897a5de3ec
- SHA1 fdba0183d86d6484f832a2565c8b7b24312269bc
- SHA512 ffad168d3c21888772f7f14129c50835abb75ccad4fe5ea9b6c24c4cdb30bc6e34b1e92d4f186593c52c0d326bb0ac7a9ac14170348cac94151354253ecfc65c
- SSDEEP 384:LUd0+k0mA1+2EyhVafV8bKKJtMCNI9LfGyHs5RBndE9Lm9NRc31w:LUdSO+i4yb4Lfds5RNW9gRci
- TLSH
  T1BDB2F950BBE40668F5FF0F35AEB161248A36FD469D22EA1D4984600E5C73AD1CEA1F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  WizWorm V5/WizWorm V5/Plugins/Pastime.dll
- Size 17KB
- SHA256 9c6baa080575290ce8ec5baca2623f5b8fe385f66097d91051724d94c5517ccc
- MD5 d32885712bdae134e2977428a224a998
- SHA1 e5f3ee5de61eee5d555ec5b9745a70263e04369c
- SHA512 590bc3ac2fd431a9a8c26d6723bb4ee9c423ced61e9f5919d1d542cb057c1101998bc9959562dda9de75c66e8bebd700dec25c163005c05d22c5be76979c7d9b
- SSDEEP 384:4zO/ClGe/92X84kVepi5/mY7//A7tsA8/rHjl:4zO/CEe/92X8UwH/NA8/rHh
- TLSH
  T11B8209295BE98261C2FE1EB208B3B31513B4E302DD13FF1E95D875666C73985C6307AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  WizWorm V5/WizWorm V5/Plugins/Performance.dll
- Size 15KB
- SHA256 92ce8f32eaa79c488581c1610d8e0e84d78525fc735cdd3e8e6ed84c06d33cee
- MD5 5e63a51cd2774bbcc6caab77b60dc450
- SHA1 bba26f1076de1ae7558b98bf930a0a9519b0f6b6
- SHA512 c5a83d711567debd1cb8f9f2b083cbff4bb24928ca8ca3abda9057f634dc8a280c98e15cd9987e73cb1b4a56128b7d96c62e88bea12b23c01a3e144b63e44409
- SSDEEP 384:YmdLFV5hMFD1m1mTgK62QxH47OVp/7EaBB:DdLD529kuCHVE6B
- TLSH
  T1B2621919F3E58235C6ED4AB24873B2412775EB039E13FB2E09C860DA6F635C94F51B92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  WizWorm V5/WizWorm V5/Plugins/ProcessManager.dll
- Size 17KB
- SHA256 1f65a69ba5bf16a4b97ce5c216a9c29a13b2b99300ebae64c64a29d2b27c9e1b
- MD5 5da2559f3a80e5b475156951f3403c97
- SHA1 3fd44fcbbfb7763009c08a7e99bbaf66f49516ee
- SHA512 f5fd74a1c3fe75ae30668fe29d6f663aef8d00130b8c5bff762ec442468298f28f12ae393874edd405ca33b75c0994b705be9f58f6b17dbfc2b7ecaef8f7fc10
- SSDEEP 384:+dftFqzm2PRV+fl2q8yRQsCH97/Y1aLCEYpt1pnrDhV53kAvfE9zZLnVb:+dftIz1+N2ByKhTY93kAvMv
- TLSH
  T125722A0DABA593B5C2BC1DB218B392110774E305D933FB6E1CDC6026AE736968B317A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  WizWorm V5/WizWorm V5/Plugins/Programs.dll
- Size 13KB
- SHA256 3e9dc8c211456fde5ed7967bab647cb70d5edadca5a727590c40e3db687cede7
- MD5 fbbc9b49d3f5984dcd670c1987f55153
- SHA1 252bedc5588284d6f2fea9be03339d270dd2b77e
- SHA512 6dfb92a20a78bb744926504c8de814e23ec33f842f77e94607f764a364fd59b96c14634b9073f245c9321e28673de44037037da8b8748b6e56839e6a5a39b17e
- SSDEEP 384:SPjnqNd9FVuqdZjdnTu1NYTX/15jbBvRZb:SPjnqNFVus3TN/1Hvf
- TLSH
  T109520965A7E4833AC6FE0E721C7366001739EB058D13FF2F16E8719A9DB35858711BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  WizWorm V5/WizWorm V5/Plugins/Ransomware.dll
- Size 20KB
- SHA256 ea59f29a64927d538936cc769758a2697807528f2585ab42742c2ff1d8eb6ae3
- MD5 ffcbc0fc53c808ca7f469b24e90510f5
- SHA1 ceaf499be79eb3ae49c3445c272042597f0a2ba7
- SHA512 a7bfda8eb49d5888a046789b950b19e1d9c940754fda842c30834c88856c512d6aaaadc71ecfd7366060d8b2e14f542978ad114214e0998798352c5aa9e13610
- SSDEEP 384:uVSO27QJHvpebFn0LC9Tk7fYbKi+ZMuqI+sHY4k7EseEDtHxh:uVm7Q1vpebF0LC9TqAbfj7xt1
- TLSH
  T1FA92F62D63E0E171DCBF1AF354B3D2510371DD35A821F62C7ACEB0AA1FB20498295E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  WizWorm V5/WizWorm V5/Plugins/Recovery.dll
- Size 1.3MB
- SHA256 1fee9d5a48fdbe7cdd17774168783c503a0e565fa98c24488d011765ae099f6a
- MD5 810e8cc96c782069f7d7578f8ac3682c
- SHA1 83764cd707f32c94b17c5f14504f913b501fe8bc
- SHA512 ad66a99652241d82492ec40cadf02039b27fbe5f6f9e4a0eabcb70ec38ad018af0b777cb9b94a2f5804d4b6826cf0d987afb23f4fefda06511b863b6048fd72a
- SSDEEP 24576:XGlTjiaeAeOTKAzbARntW+hZxCNqbo6RVX8sa6AtWZl2cgW+iIWqnwiYWefrXu:XGNjiSZTKAzkltDhTCcVX8saTtWyccWd
- TLSH
  T13C5523141BE88B28D6FF063AD570012847F2F082A957F79F4F9698E92DB17C48516FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  WizWorm V5/WizWorm V5/Plugins/Recovery.pdb
- Size 379KB
- SHA256 a4f0aaa221ab9eac8350fbfa0d534852e08ac5c028ead2b3ffd71f7798c543ca
- MD5 c7c5cb337fb52bd7456698a8f3eed900
- SHA1 e8b635bbafbb1f2eb63b963df501e927cce6bf1e
- SHA512 3cf21f05d71c0e12b5d42edd8df620c4d679202aa5e38da8b4eeb65f1d32483081584d925dc4a65fa91d947e93d1893e02b47462b5ed5df16ffa83f1b341680f
- SSDEEP 6144:MyifK4Gn7iYFNvhfCCP9V09FsiYnco5JlEjW:BFMYnco50
- TLSH
  T148848307BF81CA72C465CA3852AF8F1D4738E584CB87A74F6B95B06C3EE23561E47264
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral30
- Target
  WizWorm V5/WizWorm V5/Plugins/ReverseProxy.xml
- Size 665B
- SHA256 9be09e749f9e2412085e547d16a4ff6a9636e31e700dd7e782eaf9db8b69bf6b
- MD5 5163e1bb1064641395e458a715af0a26
- SHA1 101e14d6bef372390bbc04f9877c484090504734
- SHA512 47eaa0aba56cc2cd8558e66a6a9e8ac51decf9a46c1cf27a524f0174cd4d980201be864c991320b6921ba236b3d4041953234f8459ba8b0eb5a8bcf94fc18acd
- TLSH
  T15D01D602A389AD354D35153B2D94B8C8318B5A25D978240DDC7929370BE13DA63EBDA1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral31
- Target
  WizWorm V5/WizWorm V5/Plugins/sound.wav
- Size 1.5MB
- SHA256 daedac6b3b2306a086be70851cdc408d251655636b2db0db089bd808e9fe7905
- MD5 8f6439a245bf967fa81d1ef54c3699d4
- SHA1 3128c7ee5dec14901a2ce44a0487e3f84bbd794c
- SHA512 0cd4af3b0c139455db21cf23ca5bed551d6e0f9c933b775246893e344e2b05b80fce0f5a11ccea696c5b82424091f483e4c750e29ef6a76eca0136459fbcc63f
- SSDEEP 24576:8WsLHraTnmzp2ik0BHK0qip2WNObk7epNRV0uAaILb6AO6x:8WuH+Tnm9k0BHKc7NOb+EyuAaabhO6
- TLSH
  T1EE658D81F201DB91C4DF6A355556DBF903372E46AF07A7622034FA6339B24C32E996CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32