General

  • Target

    498efae7d3a3e2f62d4b10b39a108b11a752c00cac5731e2d7f61309001babcf

  • Size

    535KB

  • Sample

    220712-ttcz3ahgfq

  • MD5

    22652ee1bbcaa82d100e06162eb6a746

  • SHA1

    6b562f54049432166fa31ca7b55d4be8188d2304

  • SHA256

    498efae7d3a3e2f62d4b10b39a108b11a752c00cac5731e2d7f61309001babcf

  • SHA512

    9dbbe152c168e9578cff7f35ed23ed5f71b75f4c8976d6d810acf4d448747aa362bc32f200309a223c34eb1733104162d9040de979401628f9fba646ffdddcc6

Malware Config

Targets

    • Target

      498efae7d3a3e2f62d4b10b39a108b11a752c00cac5731e2d7f61309001babcf

    • Size

      535KB

    • MD5

      22652ee1bbcaa82d100e06162eb6a746

    • SHA1

      6b562f54049432166fa31ca7b55d4be8188d2304

    • SHA256

      498efae7d3a3e2f62d4b10b39a108b11a752c00cac5731e2d7f61309001babcf

    • SHA512

      9dbbe152c168e9578cff7f35ed23ed5f71b75f4c8976d6d810acf4d448747aa362bc32f200309a223c34eb1733104162d9040de979401628f9fba646ffdddcc6

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks