General

  • Target

    71519634ab42dcbd0983ccce4bdbe5987d33572404c3d307b330875ac766d769

  • Size

    1009KB

  • Sample

    220703-jrxatabbaq

  • MD5

    39067f68a3d1a8eab9e7973a8c377e15

  • SHA1

    84f01392136682d0e47be2c1662d4bef6d6562e6

  • SHA256

    71519634ab42dcbd0983ccce4bdbe5987d33572404c3d307b330875ac766d769

  • SHA512

    36d8c38d568067d58f472322cf4c2df6b19ad149bf247b3ca6395657a9e1e74dbfe0f1c8b6005be078aaea3869cc3b3552431e41bbd10abbc24d252a26e0cf70

Malware Config

Targets

    • Target

      71519634ab42dcbd0983ccce4bdbe5987d33572404c3d307b330875ac766d769

    • Size

      1009KB

    • MD5

      39067f68a3d1a8eab9e7973a8c377e15

    • SHA1

      84f01392136682d0e47be2c1662d4bef6d6562e6

    • SHA256

      71519634ab42dcbd0983ccce4bdbe5987d33572404c3d307b330875ac766d769

    • SHA512

      36d8c38d568067d58f472322cf4c2df6b19ad149bf247b3ca6395657a9e1e74dbfe0f1c8b6005be078aaea3869cc3b3552431e41bbd10abbc24d252a26e0cf70

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks