General

  • Target

    NEW ORDER.jar

  • Size

    651KB

  • Sample

    221201-q8rvzseb26

  • MD5

    397fee54483eade3af6e9cf742b7e6fc

  • SHA1

    ddaf68f083abdc2b975872c1f751197b05c7ebe3

  • SHA256

    92a6c3210791bfc0fcefb1017cadfddaa67c9051e5a41c1ebb44260c85a388f9

  • SHA512

    721540937683017f99c037112f0c4043127f6ef4371cd66267f0fffecfa9e0cf5174ff6c23093b831d0f9edbd832a553ee8f2791de849be95add6a5a1c9930a0

  • SSDEEP

    12288:DBs5043IS1vfMU3TlpU7TvU9SKf+Vxqy+h3HVbrek3Fs42AMfreUxeSnM:DBsymIS1XMUBQjU9tfCQy+h3H1X3Fs2f

Score
10/10

Malware Config

Targets

    • Target

      NEW ORDER.jar

    • Size

      651KB

    • MD5

      397fee54483eade3af6e9cf742b7e6fc

    • SHA1

      ddaf68f083abdc2b975872c1f751197b05c7ebe3

    • SHA256

      92a6c3210791bfc0fcefb1017cadfddaa67c9051e5a41c1ebb44260c85a388f9

    • SHA512

      721540937683017f99c037112f0c4043127f6ef4371cd66267f0fffecfa9e0cf5174ff6c23093b831d0f9edbd832a553ee8f2791de849be95add6a5a1c9930a0

    • SSDEEP

      12288:DBs5043IS1vfMU3TlpU7TvU9SKf+Vxqy+h3HVbrek3Fs42AMfreUxeSnM:DBsymIS1XMUBQjU9tfCQy+h3H1X3Fs2f

    Score
    10/10
    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks