Overview

overview

10

Static

static

1

doc.jar

windows7-x64

1

doc.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    doc.jar

  • Size

    486KB

  • Sample

    240923-16r33svand

  • MD5

    4a190af91ef7566d5cea06510917c7aa

  • SHA1

    88e8f103bd034f3cef01ae3e94787ebb72294c5e

  • SHA256

    f7d036522e6c5c1ba72762e3e9a54b41f338fd26103e84a5f9084367f1af132e

  • SHA512

    0d1824c2b59bcb990c8419ae1fc33640e263a1889b270d96fea64b472e08b0ded671511e1b5a0279bdb8311f3d2c91d033c1f91a1c09eb8436e05da6faf2d5fc

  • SSDEEP

    6144:2OmWFSKd4idROQWykkWWlfw/frdaI5pxUb7gvY8ulmcCV/hIl0/0c2qna3PJ7phm:2nvKdYcgP/DH5pxogQNUhIK/0c2qnZ

Score
10/10
adwindpersistencetrojan

Malware Config

Targets

    • Target

      doc.jar

    • Size

      486KB

    • MD5

      4a190af91ef7566d5cea06510917c7aa

    • SHA1

      88e8f103bd034f3cef01ae3e94787ebb72294c5e

    • SHA256

      f7d036522e6c5c1ba72762e3e9a54b41f338fd26103e84a5f9084367f1af132e

    • SHA512

      0d1824c2b59bcb990c8419ae1fc33640e263a1889b270d96fea64b472e08b0ded671511e1b5a0279bdb8311f3d2c91d033c1f91a1c09eb8436e05da6faf2d5fc

    • SSDEEP

      6144:2OmWFSKd4idROQWykkWWlfw/frdaI5pxUb7gvY8ulmcCV/hIl0/0c2qna3PJ7phm:2nvKdYcgP/DH5pxogQNUhIK/0c2qnZ

    Score
    10/10
    adwindpersistencetrojan

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

      trojanadwind

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks