Overview

overview

10

Static

static

1

79f0ee0dfa...18.jar

windows7-x64

10

79f0ee0dfa...18.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79f0ee0dfab6d107dcf4632f559ff3ae_JaffaCakes118

  • Size

    489KB

  • Sample

    240527-v6w45sbg9t

  • MD5

    79f0ee0dfab6d107dcf4632f559ff3ae

  • SHA1

    6c7727e2a2e467234757b71d275794073e77ac31

  • SHA256

    b818d2d4e3c879d076efd2f9a1c30bdb412c354245d95b31eeba607fce68a7fd

  • SHA512

    b71ece005dec547218e5bba8d76352c079d85f920ebf81d365a55b874d3b111b9ef71273723974a9056c0f3c90f430628ffe79d65859c3c6774d2da6a85b7315

  • SSDEEP

    12288:ujUyciIk9XyLLz/cZx1NAKzL0dy8ukE2zhGO:u/cIXsXcZxB30dH7zhGO

Score
10/10
adwinddiscoverypersistencetrojan

Malware Config

Targets

    • Target

      79f0ee0dfab6d107dcf4632f559ff3ae_JaffaCakes118

    • Size

      489KB

    • MD5

      79f0ee0dfab6d107dcf4632f559ff3ae

    • SHA1

      6c7727e2a2e467234757b71d275794073e77ac31

    • SHA256

      b818d2d4e3c879d076efd2f9a1c30bdb412c354245d95b31eeba607fce68a7fd

    • SHA512

      b71ece005dec547218e5bba8d76352c079d85f920ebf81d365a55b874d3b111b9ef71273723974a9056c0f3c90f430628ffe79d65859c3c6774d2da6a85b7315

    • SSDEEP

      12288:ujUyciIk9XyLLz/cZx1NAKzL0dy8ukE2zhGO:u/cIXsXcZxB30dH7zhGO

    Score
    10/10
    adwindpersistencetrojandiscovery

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

      trojanadwind

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks