General

  • Target

    3c4f34333b5b2f6e6f5e76f305cb409f4c5154d2ff7f8a204744e3daf380837a

  • Size

    710KB

  • Sample

    220703-jr4d5abbbm

  • MD5

    7a0e602f1af71a48c1614d7163d0c8d6

  • SHA1

    4733ae23bcd9f0f15ce7f7c3191ac2e33a649bef

  • SHA256

    3c4f34333b5b2f6e6f5e76f305cb409f4c5154d2ff7f8a204744e3daf380837a

  • SHA512

    830ab3a3acf7fb211f288257b966d3c57d66499f4abd3c6ecf216d03e6c168b8a56162b4609bf3e5427e95dc5f167958eccf12e47560971fb8644a5b6187b016

Malware Config

Targets

    • Target

      Receipt.jar

    • Size

      1009KB

    • MD5

      39067f68a3d1a8eab9e7973a8c377e15

    • SHA1

      84f01392136682d0e47be2c1662d4bef6d6562e6

    • SHA256

      71519634ab42dcbd0983ccce4bdbe5987d33572404c3d307b330875ac766d769

    • SHA512

      36d8c38d568067d58f472322cf4c2df6b19ad149bf247b3ca6395657a9e1e74dbfe0f1c8b6005be078aaea3869cc3b3552431e41bbd10abbc24d252a26e0cf70

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks