1ff91c9d6e5c264f3c9c997ec23bbac9638903b2469cf1c896d56e362d964d26

General

Target

wind.rar
Size

960KB
Sample

240716-kwvhfsxcrh
MD5

3e89f62102bb23d73df9833ab2550a37
SHA1

2c46d5370d3a98c2dbf95a5c266368f3498dc703
SHA256

1ff91c9d6e5c264f3c9c997ec23bbac9638903b2469cf1c896d56e362d964d26
SHA512

e2d03c9e52aa6022665bf28ef2e31f9a8b8a3c7f0956f3c2f92f2ec863b807b712d97e1df5a712b8acd9dbf8fa729c04e9560af2c8181adf28a19640df9794b8
SSDEEP

12288:Evv9O2XtL/CwykWT22a21MSjH4RmSFEB6595pWHWGRk7O/FX93uMCcuNjliJDWQg:uv9OwtrePa21zb4ASq4/eeO/FtRuQa

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  wind/WindInject.exe
- Size
  
  1.3MB
- MD5
  
  22b449c7a4500fa0af7b96f069bf6eb9
- SHA1
  
  0ea6d011872323878eb04bee2d6326a954cd4982
- SHA256
  
  cde1f97f9d41124f1e4aad4359530f58dfc28536805add5ed03748a33dd28587
- SHA512
  
  6208fa38122297c550ae08720e37988b5b31bd2ca66c96a9c4e4e215b83b4ea4d7f174f1f9b597cf1469eabf828f77c10ce16292691ffe0078ce9e8dd0c1f3e8
- SSDEEP
  
  24576:6elSGhjCg7136MTpcYvk2V1EaR8amDbYC3hYzQf0StTnIh+nNo4m5TnfV5Qk2Z8a:7ITnI0nu4m7V5Qbn
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1
- Target
  
  wind/libcurl.dll
- Size
  
  546KB
- MD5
  
  2024156665356070ea193498d076ea7e
- SHA1
  
  304fd6c02e788ce55404560e88ecc45d78961d1f
- SHA256
  
  815e4160ca9fcf4f6bf2b44b004a35cdb5988103d1204102eb7320ce2146a9bb
- SHA512
  
  dec6441fe2fe25e5c2bce8f916d58d3be2bb218f2e82d27e346bce5100caac239c484f4e10f0fdfdc152fda209b066ac04d89b62bdcbe5cfe0393734beb16962
- SSDEEP
  
  12288:TIEuXoN7eLmPPIy/KN2nalkLPrEOkTR1VcTo/w4l8DJCLd:EEAoleL2PIyyNrlkLPG1VcTo/w4l8DJs
Score

1^/10
behavioral2
- Target
  
  wind/xxhash.dll
- Size
  
  45KB
- MD5
  
  fd4a9c28c2b7b7f7cae985eed789f0ce
- SHA1
  
  44b51dd9a141f3dfcc090549e6c90071f8b55fb4
- SHA256
  
  dc354e7ea9046cadbed8645e4666975a523463500c877574f8e8306d958b7304
- SHA512
  
  b3ae3d523a1a2de93f05cfa856ac6984d444ee5180f862f0046be3acd02fb499400909449c7e47f764aea2d7d3863e42c7029b0cfc8803b79a91c9f56f3b8bc1
- SSDEEP
  
  768:f9otvM7DZ1LMDJdj+LVvgFlJus4zBYdXK3QDV:f9UEDLMDJxKM0scCXKA
Score

1^/10
behavioral3
- Target
  
  wind/zlib1.dll
- Size
  
  87KB
- MD5
  
  46b86e47c082b3ca753e264538c6b9ba
- SHA1
  
  aafa06e387ab9eddc120de3fc0127332cdb8fe1d
- SHA256
  
  cf0bf2746b40710452df596fabd497df250f7693db652c13971aee7c69226c18
- SHA512
  
  31a396fe4349c81067f1936b92e68b058dea5fee2faf972c3bb39d7e2c6ce48292eac5bbc5b43545e07e8aac03f299fb504bfe651b3e432b64e302c651f3d81b
- SSDEEP
  
  1536:47wjHHWwn1rhEzjEp70E2thqlzY2qIOcIOZIelMbHi:4cjH2w1EjEpIqa24SZICMri
Score

1^/10
behavioral4
- Target
  
  wind/zstd.dll
- Size
  
  639KB
- MD5
  
  91032907f8dc67be99885b0b1169837a
- SHA1
  
  63b6cd2442d68907ae64bdf72095ad08f0b4d00e
- SHA256
  
  ab04353fdcf07994a048ad4dbec1579436066f047fdd63d36e4e29f4b1dd6a2b
- SHA512
  
  83ab14249829f9d98d41363a7a6b5b7be8dfda5f51a017145da7930e42cc9de2ce79a524960d115dc533343b62bfdefdce817d95d0c779687e5ee15f2347856f
- SSDEEP
  
  12288:AlNqGONdPaszBp/I3MV4IIdsdVWoRpEn/x:AfazBpw3MV4RdsdVWoRpE
Score

1^/10
behavioral5