General
- Target blwiz200.exe
- Size 4.6MB
- Sample260720-gw21ragt2p
- SHA256 04697ed1df36f9232e38cabb6951977b85d0d08d959745a0f485066fd236ca96
- MD5 594c63aad4c41eb2ab19e08b839c10eb
- SHA1 8044b9b261efccc925dfbd07dac8a6d5ba8ff260
- SHA512 72a1886fd0e64255bf57d2b121e8270aef6edb7e44bd6add1c9c47c7e9c2a1e3257a92bc549c5ece040b34b41c8d9e0be919bbfcf22cc134c05a3c31ab6af452
- SSDEEP 98304:NZSQ4Rwpt+hSV/wMdyyck0hcu7vTmicnb0LQbapwpAaMnJsqL:LPfdwy70pvT7iSKa8ArJsw
- TLSH T15326332B5A338631E226B572467E4A740F221F0E9C75387629ACC7DAEF7724BD64D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
blwiz200.exe
Resource
win10v2004-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
blwiz200.exe
Resource
win11ltsc2024-20260709-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target blwiz200.exe
- Size 4.6MB
- SHA256 04697ed1df36f9232e38cabb6951977b85d0d08d959745a0f485066fd236ca96
- MD5 594c63aad4c41eb2ab19e08b839c10eb
- SHA1 8044b9b261efccc925dfbd07dac8a6d5ba8ff260
- SHA512 72a1886fd0e64255bf57d2b121e8270aef6edb7e44bd6add1c9c47c7e9c2a1e3257a92bc549c5ece040b34b41c8d9e0be919bbfcf22cc134c05a3c31ab6af452
- SSDEEP 98304:NZSQ4Rwpt+hSV/wMdyyck0hcu7vTmicnb0LQbapwpAaMnJsqL:LPfdwy70pvT7iSKa8ArJsw
- TLSH T15326332B5A338631E226B572467E4A740F221F0E9C75387629ACC7DAEF7724BD64D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.