Overview

overview

10

Static

static

3

Blank-Owner455.exe

windows7-x64

10

Blank-Owner455.exe

windows10-2004-x64

10

Resubmissions

21-06-2024 17:58

240621-wkgm1ayfmc 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Blank-Owner455.rar

  • Size

    1.3MB

  • Sample

    240621-wkgm1ayfmc

  • MD5

    0708b141816e1287fb4bfec4c837ef6e

  • SHA1

    65884a0d7f3fab21c1e1d9432525f6f9d255744a

  • SHA256

    ddf1395c86c239c3c9c930038e69e5992c3d8260a47c96c1a21cdc770dfd5bf4

  • SHA512

    cab5388cbad7750362acec225385d62abfb01cf7dcc32c85555334d90c86d84212bcf0dff47ff960003805cb2c4ef962543ae328ffe2fc75f4c156e01ef24e84

  • SSDEEP

    24576:8x6//3ra8haNNG+NOYJFYNxNTvliZMa3X3N:MSWMaHtNnKNiOaH3N

Score
10/10
adwinddiscoverypersistencetrojan

Malware Config

Targets

    • Target

      Blank-Owner455.rar

    • Size

      1.3MB

    • MD5

      0708b141816e1287fb4bfec4c837ef6e

    • SHA1

      65884a0d7f3fab21c1e1d9432525f6f9d255744a

    • SHA256

      ddf1395c86c239c3c9c930038e69e5992c3d8260a47c96c1a21cdc770dfd5bf4

    • SHA512

      cab5388cbad7750362acec225385d62abfb01cf7dcc32c85555334d90c86d84212bcf0dff47ff960003805cb2c4ef962543ae328ffe2fc75f4c156e01ef24e84

    • SSDEEP

      24576:8x6//3ra8haNNG+NOYJFYNxNTvliZMa3X3N:MSWMaHtNnKNiOaH3N

    Score
    10/10
    adwindtrojandiscoverypersistence

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

      trojanadwind

    • Class file contains resources related to AdWind

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks