General

  • Target
    WizWorm v4.7z.rar
  • Size 35.5MB
  • Sample260825-3pwfaaxtcw
  • SHA256 4376d4245cf468b88db8bd97c885fdf5bba5f8f7bd99989e341ee03ec0519b12
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 44 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • WizWorm v4.7z.rar
    .rar 35.5MB
  • WizWorm v4.7z/WizWorm v4/Background.png
    .png 17KB
  • WizWorm v4.7z/WizWorm v4/Dynamitey.dll
    .dll 164KB
  • WizWorm v4.7z/WizWorm v4/FastColoredTextBox.dll
    .dll 333KB
  • WizWorm v4.7z/WizWorm v4/Fixer.bat
    126B
  • WizWorm v4.7z/WizWorm v4/GMap.NET.Core.dll
    .dll 2.9MB
  • WizWorm v4.7z/WizWorm v4/GMap.NET.WindowsForms.dll
    .dll 147KB
  • WizWorm v4.7z/WizWorm v4/GeoIP.dat
    1.2MB
  • WizWorm v4.7z/WizWorm v4/Guna.UI2.dll
    .dll 1.9MB
  • WizWorm v4.7z/WizWorm v4/IconExtractor.dll
    .dll 10KB
  • WizWorm v4.7z/WizWorm v4/Intro.wav
    591KB
  • WizWorm v4.7z/WizWorm v4/MetroFramework.Design.dll
    .dll 16KB
  • WizWorm v4.7z/WizWorm v4/MetroFramework.Fonts.dll
    .dll 656KB
  • WizWorm v4.7z/WizWorm v4/MetroFramework.dll
    .dll 345KB
  • WizWorm v4.7z/WizWorm v4/NAudio.dll
    .dll 502KB
  • WizWorm v4.7z/WizWorm v4/Plugins/ActiveWindows.dll
    .dll 14KB
  • WizWorm v4.7z/WizWorm v4/Plugins/All-In-One.dll
    .dll 4.8MB
  • WizWorm v4.7z/WizWorm v4/Plugins/Chat.dll
    .dll 18KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Clipboard.dll
    .dll 14KB
  • WizWorm v4.7z/WizWorm v4/Plugins/FileManager.dll
    .dll 27KB
  • WizWorm v4.7z/WizWorm v4/Plugins/FileSeacher.dll
    .dll 478KB
  • WizWorm v4.7z/WizWorm v4/Plugins/HRDP.dll
    .dll 1.7MB
  • WizWorm v4.7z/WizWorm v4/Plugins/HVNC.dll
    .dll 58KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Informations.dll
    .dll 22KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Keylogger.dll
    .dll 17KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Maps.dll
    .dll 15KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Microphone.dll
    .dll 540KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Ngrok-Disk.dll
    .dll 7.0MB
  • WizWorm v4.7z/WizWorm v4/Plugins/Options.dll
    .dll 24KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Pastime.dll
    .dll 17KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Performance.dll
    .dll 15KB
  • WizWorm v4.7z/WizWorm v4/Plugins/ProcessManager.dll
    .dll 17KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Programs.dll
    .dll 13KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Ransomware.dll
    .dll 20KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Recovery.dll
    .dll 1.3MB
  • WizWorm v4.7z/WizWorm v4/Plugins/Recovery.pdb
    389KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Regedit.dll
    .dll 15KB
  • WizWorm v4.7z/WizWorm v4/Plugins/RemoteDesktop.dll
    .dll 18KB
  • WizWorm v4.7z/WizWorm v4/Plugins/ReverseProxy.dll
    .dll 16KB
  • WizWorm v4.7z/WizWorm v4/Plugins/ReverseProxy.xml
    665B
  • WizWorm v4.7z/WizWorm v4/Plugins/RunPE.dll
    .dll 11KB
  • WizWorm v4.7z/WizWorm v4/Plugins/ServiceManager.dll
    .dll 14KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Shell.dll
    .dll 15KB
  • WizWorm v4.7z/WizWorm v4/Plugins/StartupManager.dll
    .dll 189KB
  • WizWorm v4.7z/WizWorm v4/Plugins/System.Management.Automation.dll
    .dll 2.9MB
  • WizWorm v4.7z/WizWorm v4/Plugins/TCPConnections.dll
    .dll 16KB
  • WizWorm v4.7z/WizWorm v4/Plugins/UACBypass.dll
    .dll 12KB
  • WizWorm v4.7z/WizWorm v4/Plugins/VB.NET Compiler.dll
    .dll 15KB
  • WizWorm v4.7z/WizWorm v4/Plugins/WSound.dll
    .dll 539KB
  • WizWorm v4.7z/WizWorm v4/Plugins/Wallpaper.dll
    .dll 8KB
  • WizWorm v4.7z/WizWorm v4/Plugins/WebCam.dll
    .dll 209KB
  • WizWorm v4.7z/WizWorm v4/Plugins/libcrypto-1_1-x64.dll
    .dll 3.3MB
  • WizWorm v4.7z/WizWorm v4/Plugins/libpkcs11-helper-1.dll
    .dll 91KB
  • WizWorm v4.7z/WizWorm v4/Plugins/libssl-1_1-x64.dll
    .dll 678KB
  • WizWorm v4.7z/WizWorm v4/Plugins/lzo2.dll
    .dll 118KB
  • WizWorm v4.7z/WizWorm v4/Plugins/openvpn-gui.exe
    .exe 792KB
  • WizWorm v4.7z/WizWorm v4/Plugins/openvpn.exe
    .exe 821KB
  • WizWorm v4.7z/WizWorm v4/Plugins/openvpnserv.exe
    .exe 62KB
  • WizWorm v4.7z/WizWorm v4/Plugins/tapctl.exe
    .exe 36KB
  • WizWorm v4.7z/WizWorm v4/Plugins/vcruntime140.dll
    .dll 94KB
  • WizWorm v4.7z/WizWorm v4/SimpleObfuscator.dll
    .dll 1.4MB
  • WizWorm v4.7z/WizWorm v4/System.Runtime.Serialization.Primitives.dll
    .dll 26KB
  • WizWorm v4.7z/WizWorm v4/WizWorm.exe
    .exe 14.3MB

WizWorm v4.7z.rar

  • SHA256 4376d4245cf468b88db8bd97c885fdf5bba5f8f7bd99989e341ee03ec0519b12
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
123