Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

RAT_Builder.jar

windows7-x64

3

RAT_Builder.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RAT_Builder.jar

  • Size

    23KB

  • Sample

    240727-yjxzpsvdrm

  • MD5

    000f24e4692a1d706d40466be85f4464

  • SHA1

    7ba74d133bb4dd0260ef0332b740dfe266aa2b48

  • SHA256

    4b6d030fd9b8eea5f00ff03dbb7a7330f25b95a17dae0fd635ebdb315b6a9268

  • SHA512

    85778e3317c37501aaa80366884e566221f0de25e124d0c1f33bbcabfbe3bea70c29c969ab22890a7f293856b1324a9d84a99e091dfa064f8424131762fb3f35

  • SSDEEP

    384:f9snDdeDfNfiQm7o8Qob9XTD6CCjRi5bayqI9oM+CB8U5l8GlLEEEKUHUO2OVj:f9snxeTNfUknW2CCFsbH9Z+UkxK9+j

Score
10/10
adwinddiscoverypersistencetrojan

Malware Config

Targets

    • Target

      RAT_Builder.jar

    • Size

      23KB

    • MD5

      000f24e4692a1d706d40466be85f4464

    • SHA1

      7ba74d133bb4dd0260ef0332b740dfe266aa2b48

    • SHA256

      4b6d030fd9b8eea5f00ff03dbb7a7330f25b95a17dae0fd635ebdb315b6a9268

    • SHA512

      85778e3317c37501aaa80366884e566221f0de25e124d0c1f33bbcabfbe3bea70c29c969ab22890a7f293856b1324a9d84a99e091dfa064f8424131762fb3f35

    • SSDEEP

      384:f9snDdeDfNfiQm7o8Qob9XTD6CCjRi5bayqI9oM+CB8U5l8GlLEEEKUHUO2OVj:f9snxeTNfUknW2CCFsbH9Z+UkxK9+j

    Score
    10/10
    discoveryadwindpersistencetrojan

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

      trojanadwind

    • Class file contains resources related to AdWind

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks