Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

a175d061fa...6d.jar

windows7-x64

10

a175d061fa...6d.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a175d061fa3d3a6263d165c7f95261ac69d464bb744ca789a9c005abad8d026d

  • Size

    62KB

  • Sample

    221029-ctw99shben

  • MD5

    115902df0ff3992041223e42adb10e8b

  • SHA1

    f8acdddddd88089357be77788355b2377ee9e6f5

  • SHA256

    a175d061fa3d3a6263d165c7f95261ac69d464bb744ca789a9c005abad8d026d

  • SHA512

    fa9da64b5eeebbc51d097657e016492f001befacc6f7b54b4ef0548ced1603dfbfc80873d2880dd1058aef5bd4f52874d32b1cd5dc96ad2524fe6ea583a906ae

  • SSDEEP

    1536:WxvJQnmTJxrYolc/4aAi6s1kV6Y99mJ4f6fZwle:W5JQnmTP3lc/4qPKyfZwle

Score
10/10
adwindevasionpersistencetrojan

Malware Config

Targets

    • Target

      a175d061fa3d3a6263d165c7f95261ac69d464bb744ca789a9c005abad8d026d

    • Size

      62KB

    • MD5

      115902df0ff3992041223e42adb10e8b

    • SHA1

      f8acdddddd88089357be77788355b2377ee9e6f5

    • SHA256

      a175d061fa3d3a6263d165c7f95261ac69d464bb744ca789a9c005abad8d026d

    • SHA512

      fa9da64b5eeebbc51d097657e016492f001befacc6f7b54b4ef0548ced1603dfbfc80873d2880dd1058aef5bd4f52874d32b1cd5dc96ad2524fe6ea583a906ae

    • SSDEEP

      1536:WxvJQnmTJxrYolc/4aAi6s1kV6Y99mJ4f6fZwle:W5JQnmTP3lc/4qPKyfZwle

    Score
    10/10
    adwindevasionpersistencetrojan

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

      trojanadwind

    • JAR file contains resources related to AdWind

      This JAR file potentially contains loader stubs used by the AdWind RAT.

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks