adwind | 3a8cbe3afe2da35bb109fee0c7df0c503ad6733e0e2bbf0910768819ef9123e7 | Triage™

Login
Reports

Overview

overview

Static

static

Cool.jar

windows10-2004-x64

7

Cool.jar

windows10-1703-x64

7

Cool.jar

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
Cool.jar
Size 639KB
Sample240605-v6db2aea76
SHA256 3a8cbe3afe2da35bb109fee0c7df0c503ad6733e0e2bbf0910768819ef9123e7
MD5 2c35d123c5ca03235a57393989e4bd9d
SHA1 d8f3637152b9d76a9792dbf277a777b12a24adf3
SHA512 8e57963dee3c493075ec598258ad4a840dd73117d19e51ccf678c20220206946c5cf595bc63a836d06119eb39bddfbd41bc47dd1eda127215549efbdf9286565
SSDEEP 12288:s/rPQD/VRvm5Z4Fb8DLHgQ/lRz+ti+NaZrgYlWR4h3Wuk2NIS9TDMV:s/TQ7jmj4J6HgQfCHaZs2PWu5NT9TDMV
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

adwind discovery persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Cool.jar

Resource

win10v2004-20240508-en

windows10-2004-x64

5 signatures

1800 seconds

discovery persistence

Behavioral task

behavioral2

Sample

Cool.jar

Resource

win10-20240404-en

windows10-1703-x64

5 signatures

1800 seconds

discovery persistence

Behavioral task

behavioral3

Sample

Cool.jar

Resource

win10v2004-20240508-en

windows10-2004-x64

5 signatures

1800 seconds

discovery persistence

Malware Config

Targets

- Target
  Cool.jar
- Size 639KB
- SHA256 3a8cbe3afe2da35bb109fee0c7df0c503ad6733e0e2bbf0910768819ef9123e7
- MD5 2c35d123c5ca03235a57393989e4bd9d
- SHA1 d8f3637152b9d76a9792dbf277a777b12a24adf3
- SHA512 8e57963dee3c493075ec598258ad4a840dd73117d19e51ccf678c20220206946c5cf595bc63a836d06119eb39bddfbd41bc47dd1eda127215549efbdf9286565
- SSDEEP 12288:s/rPQD/VRvm5Z4Fb8DLHgQ/lRz+ti+NaZrgYlWR4h3Wuk2NIS9TDMV:s/TQ7jmj4J6HgQfCHaZs2PWu5NT9TDMV
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence

behavioral3

discoverypersistence

© 2018-2026

Terms | Privacy