Overview
overview
3Static
static
1WizWorm v4 (1).7z
windows10-ltsc_2021-x64
1WizWorm v4 (1).7z
windows11-ltsc_2024-x64
1WizWorm v4...nd.png
windows10-ltsc_2021-x64
1WizWorm v4...nd.png
windows11-ltsc_2024-x64
1WizWorm v4/Fixer.bat
windows10-ltsc_2021-x64
3WizWorm v4/Fixer.bat
windows11-ltsc_2024-x64
3WizWorm v4/GeoIP.dat
windows10-ltsc_2021-x64
3WizWorm v4/GeoIP.dat
windows11-ltsc_2024-x64
3WizWorm v4/Intro.wav
windows10-ltsc_2021-x64
1WizWorm v4/Intro.wav
windows11-ltsc_2024-x64
1WizWorm v4...ry.pdb
windows10-ltsc_2021-x64
3WizWorm v4...ry.pdb
windows11-ltsc_2024-x64
3WizWorm v4...xy.xml
windows10-ltsc_2021-x64
3WizWorm v4...xy.xml
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 13:48
Static task
static1
Behavioral task
behavioral1
Sample
WizWorm v4 (1).7z
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
WizWorm v4 (1).7z
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
WizWorm v4/Background.png
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral4
Sample
WizWorm v4/Background.png
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
WizWorm v4/Fixer.bat
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
WizWorm v4/Fixer.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
WizWorm v4/GeoIP.dat
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral8
Sample
WizWorm v4/GeoIP.dat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
WizWorm v4/Intro.wav
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral10
Sample
WizWorm v4/Intro.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
WizWorm v4/Plugins/Recovery.pdb
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral12
Sample
WizWorm v4/Plugins/Recovery.pdb
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
WizWorm v4/Plugins/ReverseProxy.xml
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral14
Sample
WizWorm v4/Plugins/ReverseProxy.xml
Resource
win11ltsc2024-20260911-en
General
- Target WizWorm v4 (1).7z
- Size 34.1MB
- Sample260916-q33ejack2y
- SHA256 4c709febc184ffe54a70a0c028b55236fc4ce083872b6be25419dc7d58e20911
- MD5 e10f9051177e0441bc8acfdd0e7845ce
- SHA1 4263711ba87d617b12f77ccd57b2b2f083bfb586
- SHA512 df44cca1bec150dd8339595c80285b22955d1771d213bff0315c7e259f71d5a1cea548a7037e6bc53edda6eddbfb584d78bc9a45daf52319d3777ab4efc0bb68
- SSDEEP 786432:CjmCP0C1PLdV6GxPL3MVwVXspziO09aZ4iEmtwCYPiwucdGJr:Ca80CVjVxbMViSmG4Fmtx+dGV
- TLSH T1A0773329B821AE791519A973AB0D1F3877DDDB4FE0500424037CEC55FB396FEA421A8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5652 7zFM.exe Token: 35 5652 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5652 7zFM.exe