adwind | wer[.]jar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

wer.jar
Size

639KB
MD5

58297ded33af2c7beea19dff3510b51c
SHA1

b04c9c399abc27ebbb9067448cfc176244bbb3cf
SHA256

4ca567f89e7ae9e41a155ccc0abcd5dd62b7bbbbef1987b41dcfe10f351fd6bf
SHA512

cdce41f0a61ee6bb8db67f10fda7e83b4ac1825e6de85ca60b5de5a52c466c2474aa0cb9a42c126b933530eab19b2a549ab8f5a290c3c5ed48b9477a6d90e203
SSDEEP

12288:onTDQ//pdzitR41XUbK7gO/TRv+9NwNm7YgKZeR3O3gu82JkSMdD0h:onfQHfi/4FD7gO9eom7l4ZguBJ3MdD0h

Score

10^/10

adwind

Malware Config

Signatures

Adwind family
adwind

Class file contains resources related to AdWind 1 IoCs

resource	yara_rule
sample	family_adwind4

Files

wer.jar
.jar