Overview

overview

10

Static

static

1

46c43109b8...4a.jar

windows7-x64

1

46c43109b8...4a.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46c43109b80f9820cf52d3212f5546cb924bd71964819863ceefe67d1f50274a.jar

  • Size

    486KB

  • Sample

    240927-bmhmvsxfkn

  • MD5

    88816660ff4c903feb52b432c42b59dc

  • SHA1

    659a83af9a3cdda1d9717f472495f049d37b168a

  • SHA256

    46c43109b80f9820cf52d3212f5546cb924bd71964819863ceefe67d1f50274a

  • SHA512

    5330fc5b512272e6a6e05f55a5fd0be925f5a5d76d82c6602864a163be80b7f959f068ba72207e0f9a9682978d43254c244199f91608c39df8e6f4dc0590955d

  • SSDEEP

    12288:p9C9s5pxogQNUhIK/0c2qnnJEr9MN3VeqPYS:7sS7B2qnnJEruN3aS

Score
10/10
adwindpersistencetrojan

Malware Config

Targets

    • Target

      46c43109b80f9820cf52d3212f5546cb924bd71964819863ceefe67d1f50274a.jar

    • Size

      486KB

    • MD5

      88816660ff4c903feb52b432c42b59dc

    • SHA1

      659a83af9a3cdda1d9717f472495f049d37b168a

    • SHA256

      46c43109b80f9820cf52d3212f5546cb924bd71964819863ceefe67d1f50274a

    • SHA512

      5330fc5b512272e6a6e05f55a5fd0be925f5a5d76d82c6602864a163be80b7f959f068ba72207e0f9a9682978d43254c244199f91608c39df8e6f4dc0590955d

    • SSDEEP

      12288:p9C9s5pxogQNUhIK/0c2qnnJEr9MN3VeqPYS:7sS7B2qnnJEruN3aS

    Score
    10/10
    adwindpersistencetrojan

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

      trojanadwind

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks