Wizzmonetize Malware Family: IOCs, Detection, MITRE ATT&CK, Response

Overview

wizzmonetize is classified as adware or a potentially-unwanted program associated with intrusive advertising or bundling. It has one or more associated MITRE ATT&CK technique references (linked on this page) that document the behaviors observed for it. We have not yet published a hand-verified detailed profile for this family; the MITRE references below are the authoritative source for its documented techniques.

Known aliases

Threat reports may refer to this family under multiple names:

MITRE ATT&CK Techniques

This family has been observed using the following ATT&CK techniques: T1176 T1112

Generated Detections (Boilerplate)

These YARA and Sigma rules are auto-generated based on the family name and aliases. They must be heavily tuned before deployment in a production environment.

YARA Rule

rule MALWARE_WIN_WIZZMONETIZE {
    meta:
        description = "Detects Wizzmonetize (adware)"
        author = "SystemHelpdesk Boilerplate Generator"
        date = "2026-07-06"
    strings:
        $s1 = "wizzmonetize" ascii wide nocase
        $s2 = "adware.wizzmonetize" ascii wide nocase
        $s3 = "pup.wizzmonetize" ascii wide nocase
        $s4 = "win32/wizzmonetize" ascii wide nocase
        $s5 = "installwizz" ascii wide nocase
    condition:
        uint16(0) == 0x5a4d and any of them
}

Sigma Rule

title: Suspicious Wizzmonetize Activity
id: 218416526b96c5bc90667593ed7544da
status: experimental
description: Detects generic indicators of the wizzmonetize malware family.
logsource:
    category: process_creation
    product: windows
detection:
    selection:
        Image|endswith:
            - '\cmd.exe'
            - '\powershell.exe'
        CommandLine|contains:
            - "*wizzmonetize*"
            - "*adware.wizzmonetize*"
            - "*pup.wizzmonetize*"
            - "*win32/wizzmonetize*"
            - "*installwizz*"
    condition: selection
level: medium

References & External Analysis

Search "wizzmonetize" on VirusTotal (External Analysis)

Frequently Asked Questions

Where can I learn more about wizzmonetize?

Refer to the linked MITRE ATT&CK technique pages, which document the behaviors associated with this family.

Related Families (Category: adware)

Explore other malware families in the same category:

Ecosystem & Interactive Environments

This profile is part of the Malware Families Catalog, a public dataset of 2,899 malware families. The catalog is also published across our ecosystem: Hugging Face, Kaggle, Replit, StackBlitz, CodeSandbox, and CodePen.

Wizzmonetize