General
- Target wiztree_4_32_portable.zip
- Size 7.4MB
- Sample260807-bmn5msvemb
- SHA256 38638b1b302b828f206c05472fb53b7db447deb2b6fc76f0d1739b514464a21a
- MD5 757eb2428ed657b6170d939dd4204f1c
- SHA1 4d0a46e191120d34c978d00f07803355288e6723
- SHA512 9baa842427f00bf10c3c7ccc50eac2829a7a4a091e556f5bc54847a53b9bcaf547f40ac5d4179f4b4a661d35a16c87594e6cbbbec934fd752b7c330547bb0971
- SSDEEP 196608:hQf+jAM+MbgXYMLIqdNU2Tm/xbuVVKVj6cM0KfU:h2+8M03Lp1C5nVjj
- TLSH T146763337CA1FE36BE71E32B3BBC0F70577A1115A914AD7164940C7464C4AAC8CB6E2A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WizTree.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
WizTree.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
WizTree64.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
WizTree64.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target WizTree.exe
- Size 7.0MB
- SHA256 d5871ca58cbafd5f52b559fbc0dd91d27d5be8a3b48879237e4b9d044ba4ac67
- MD5 ad95af37f7d8e665620776bfb5630d4a
- SHA1 25a8396a58c4235b41f06230de36ff15cc2083a3
- SHA512 119cff67f0a258617cd83423e161e596c738a26bc80c30191e0f3be0bf1ae3bbff7f8e9659f8e7e5d084edf3f7101b2eb24f8d42fc25673755c02e26655ecb76
- SSDEEP 98304:x5vA2RkX8baxKqkhNDJfLNN/a7oyWhy3TF7Fre0xBjhqgM:xZRkMbaxaNzZa7dFB7Fre0x2gM
- TLSH T16E76AF03B384653AD4AB1A3E483BD798593BBA603A119C5F57F01D4C9F3A6813D2E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target WizTree64.exe
- Size 10.5MB
- SHA256 6bffb6b63d96ff19824641e8ced04e5e0f648696073d82a508f1bb1a21e7eb46
- MD5 e0597271a9bd8f89f04eaed75bd6087f
- SHA1 cbd5b3726886ee55f6946f28979e8597dd6c9174
- SHA512 71a1fc1260c6a3f682978e3b24f74036c20f5cc4e6e85c942f581a7f638c5e25fde6ac36ae9c781a766cee3e022206a5fe0dbeb56d4e83b58610cd947e12a0bd
- SSDEEP 98304:uPLDf45144u3yAEnZOEs62gtryFre0x7jhqrG:ODf45KFIZ3XtryFre0xQrG
- TLSH T139B66D2F72A8C12DC26EC27EC1A78F50ED33B0B51736C2FB129052655F16AC49E7E265
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.