General

  • Target

    Overdue invoices.jar

  • Size

    632KB

  • Sample

    221204-w52tnseb87

  • MD5

    f73655137d31b28ca9e1ec01d2b54e54

  • SHA1

    4759d8134d88c076d7b93d6d984b45915b798366

  • SHA256

    30a050dca6550a8279dc7a7eeefb8f16025f6ab2cd3f6a0f0b15550cf487af33

  • SHA512

    1fd5ea1aa3d4091d0b6977d25cb42e04f47b5e471d81e8ea2b76b96c4997a6a86bcc85830060325ace19f9747cbc216778e7c648f19ad4c10f8c5ea00bcc35c7

  • SSDEEP

    12288:Rx4nDXAnbeyWWW4KqM6XeHKZd1QlcfzwZGwe7j2rj31x31VUST4BZetgTosCHC:RVbdWz6uHKZd1UuFBH2rDX1eST4SWkBi

Score
10/10

Malware Config

Targets

    • Target

      Overdue invoices.jar

    • Size

      632KB

    • MD5

      f73655137d31b28ca9e1ec01d2b54e54

    • SHA1

      4759d8134d88c076d7b93d6d984b45915b798366

    • SHA256

      30a050dca6550a8279dc7a7eeefb8f16025f6ab2cd3f6a0f0b15550cf487af33

    • SHA512

      1fd5ea1aa3d4091d0b6977d25cb42e04f47b5e471d81e8ea2b76b96c4997a6a86bcc85830060325ace19f9747cbc216778e7c648f19ad4c10f8c5ea00bcc35c7

    • SSDEEP

      12288:Rx4nDXAnbeyWWW4KqM6XeHKZd1QlcfzwZGwe7j2rj31x31VUST4BZetgTosCHC:RVbdWz6uHKZd1UuFBH2rDX1eST4SWkBi

    Score
    10/10
    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks