General

  • Target

    992e2d927bfeed49afade1d0ade41068cca323d28bd2fe48ba8ff841b0c454ea

  • Size

    62KB

  • Sample

    221128-xlklqaha98

  • MD5

    e5ad8f708ad48777c366dd376d16841a

  • SHA1

    d95ab336b3bc8ef75112d46d34f65f2fc6c16b0e

  • SHA256

    992e2d927bfeed49afade1d0ade41068cca323d28bd2fe48ba8ff841b0c454ea

  • SHA512

    5a413491849a17ad24aeddaa8ad29e8ac132644c3c9fdeb1715359770d42afa6069782f8013bb1c8eea2633b731ecab2b8c4992bce89f2a5d57702c9e72cc1fc

  • SSDEEP

    1536:32FxsvM86Z1fZM5HDiLQMPszGgR/dXXzBQuEDufAx/AIpM4DWx:3Ri1xM2/PyGgxdTCVKy/AIpMWWx

Malware Config

Targets

    • Target

      992e2d927bfeed49afade1d0ade41068cca323d28bd2fe48ba8ff841b0c454ea

    • Size

      62KB

    • MD5

      e5ad8f708ad48777c366dd376d16841a

    • SHA1

      d95ab336b3bc8ef75112d46d34f65f2fc6c16b0e

    • SHA256

      992e2d927bfeed49afade1d0ade41068cca323d28bd2fe48ba8ff841b0c454ea

    • SHA512

      5a413491849a17ad24aeddaa8ad29e8ac132644c3c9fdeb1715359770d42afa6069782f8013bb1c8eea2633b731ecab2b8c4992bce89f2a5d57702c9e72cc1fc

    • SSDEEP

      1536:32FxsvM86Z1fZM5HDiLQMPszGgR/dXXzBQuEDufAx/AIpM4DWx:3Ri1xM2/PyGgxdTCVKy/AIpMWWx

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

    • JAR file contains resources related to AdWind

      This JAR file potentially contains loader stubs used by the AdWind RAT.

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks