adwind | 545fe827ee735722a04a1e4a92785acadb862ee01cac59da3597cde7167669c9 | Triage

Sharing

General

Target

545fe827ee735722a04a1e4a92785acadb862ee01cac59da3597cde7167669c9.zip
Size

1.9MB
Sample

241015-g4v76szald
MD5

77ca3384128afd246b2cad7bccec2311
SHA1

ae59acd6e7390054ca3a509f2a4538c42570b98a
SHA256

545fe827ee735722a04a1e4a92785acadb862ee01cac59da3597cde7167669c9
SHA512

c7ba25ef83e53edf4031236747096844a488ad50512a5d89b60e8769c9b804fef52a44540621e5bdc30ec0f94382a619e08d734a945d341e61bfc6cd52c5a557
SSDEEP

49152:LuQP6DDoCx8rOIBoBNJQ638pwsY+KehkZh7PHXS/sgghib:LDiDfcOIBoa6tspWNPHXKwib

Score

10^/10

adwind persistence

Malware Config

Targets

- Target
  
  545fe827ee735722a04a1e4a92785acadb862ee01cac59da3597cde7167669c9.zip
- Size
  
  1.9MB
- MD5
  
  77ca3384128afd246b2cad7bccec2311
- SHA1
  
  ae59acd6e7390054ca3a509f2a4538c42570b98a
- SHA256
  
  545fe827ee735722a04a1e4a92785acadb862ee01cac59da3597cde7167669c9
- SHA512
  
  c7ba25ef83e53edf4031236747096844a488ad50512a5d89b60e8769c9b804fef52a44540621e5bdc30ec0f94382a619e08d734a945d341e61bfc6cd52c5a557
- SSDEEP
  
  49152:LuQP6DDoCx8rOIBoBNJQ638pwsY+KehkZh7PHXS/sgghib:LDiDfcOIBoa6tspWNPHXKwib
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2