General

  • Target

    5caa47b2a5c514e7fd746e2ea4610bac1273aae251b107e043b327cd1c745d56

  • Size

    976KB

  • Sample

    220801-gdtawscbf3

  • MD5

    b6bf71c6b546437d25d13f78c7b754cd

  • SHA1

    86e4c5ef31465ddd3ddaf036dccbb77e27e962a8

  • SHA256

    5caa47b2a5c514e7fd746e2ea4610bac1273aae251b107e043b327cd1c745d56

  • SHA512

    6fc954df51f5b0e5b2712acbe242eb5e10de7f09e7c4fd19655ab6a2bcd62a885c21d2e7bf339a1eba2d0f444fe227749e672c39f6cd741d6a1592cf588df708

Malware Config

Targets

    • Target

      5caa47b2a5c514e7fd746e2ea4610bac1273aae251b107e043b327cd1c745d56

    • Size

      976KB

    • MD5

      b6bf71c6b546437d25d13f78c7b754cd

    • SHA1

      86e4c5ef31465ddd3ddaf036dccbb77e27e962a8

    • SHA256

      5caa47b2a5c514e7fd746e2ea4610bac1273aae251b107e043b327cd1c745d56

    • SHA512

      6fc954df51f5b0e5b2712acbe242eb5e10de7f09e7c4fd19655ab6a2bcd62a885c21d2e7bf339a1eba2d0f444fe227749e672c39f6cd741d6a1592cf588df708

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks