Overview

overview

10

Static

static

1

fe15c51d7c...18.jar

windows7-x64

1

fe15c51d7c...18.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe15c51d7c715b83ba1640cb173f7879_JaffaCakes118

  • Size

    601KB

  • Sample

    240929-jpl23axhnb

  • MD5

    fe15c51d7c715b83ba1640cb173f7879

  • SHA1

    c093fae4877da2191ba3616a26df3040351d2eed

  • SHA256

    e366205e70911e2955e8f3666b5f570340c89fdfb63f907e3d65a476e702a75c

  • SHA512

    9438f27fa31afc30ae88e6f4b4dc00538b5a9f94766969d0cb41c074a3328d44ae4ecb45c30314eea944e49105806aad1adbe17dc2b48858a1a4fce04b31dabf

  • SSDEEP

    12288:RNo/0PVCJ4PIyP92UCmEAzOa3mRqHq7kTGZM3iEyvaxAop9oZdXQzq:jk0dHJP925i34+663iEL4ozq

Score
10/10
adwindpersistencetrojan

Malware Config

Targets

    • Target

      fe15c51d7c715b83ba1640cb173f7879_JaffaCakes118

    • Size

      601KB

    • MD5

      fe15c51d7c715b83ba1640cb173f7879

    • SHA1

      c093fae4877da2191ba3616a26df3040351d2eed

    • SHA256

      e366205e70911e2955e8f3666b5f570340c89fdfb63f907e3d65a476e702a75c

    • SHA512

      9438f27fa31afc30ae88e6f4b4dc00538b5a9f94766969d0cb41c074a3328d44ae4ecb45c30314eea944e49105806aad1adbe17dc2b48858a1a4fce04b31dabf

    • SSDEEP

      12288:RNo/0PVCJ4PIyP92UCmEAzOa3mRqHq7kTGZM3iEyvaxAop9oZdXQzq:jk0dHJP925i34+663iEL4ozq

    Score
    10/10
    adwindpersistencetrojan

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

      trojanadwind

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks