General

  • Target

    e9a90a37477041232fbc850660687bee41ee1d472627a4c059aa2e58f4b4f5ef

  • Size

    488KB

  • Sample

    220731-nqyvgaebc8

  • MD5

    3321aefcc35b3ef6aba971ca8a3e2357

  • SHA1

    53d0d06c48e8c1416a47bf637c60d75cfc14f6c0

  • SHA256

    e9a90a37477041232fbc850660687bee41ee1d472627a4c059aa2e58f4b4f5ef

  • SHA512

    f8b023fdbe786101175b1f30ff207f04efe87ca36fe30c6276b04d061e70425772b1683b932f4b35154a9a4df84a9f7fb585783ae16adf55c63ccd302bb60821

Malware Config

Targets

    • Target

      e9a90a37477041232fbc850660687bee41ee1d472627a4c059aa2e58f4b4f5ef

    • Size

      488KB

    • MD5

      3321aefcc35b3ef6aba971ca8a3e2357

    • SHA1

      53d0d06c48e8c1416a47bf637c60d75cfc14f6c0

    • SHA256

      e9a90a37477041232fbc850660687bee41ee1d472627a4c059aa2e58f4b4f5ef

    • SHA512

      f8b023fdbe786101175b1f30ff207f04efe87ca36fe30c6276b04d061e70425772b1683b932f4b35154a9a4df84a9f7fb585783ae16adf55c63ccd302bb60821

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks