adwind | 993694328f3e8d1614dad8e5f964d447b593236083dea4ef95af85bf920898f0 | Triage

Sharing

General

Target

993694328f3e8d1614dad8e5f964d447b593236083dea4ef95af85bf920898f0.jar
Size

1.9MB
Sample

241016-fxrqqsycqm
MD5

7b94b622aaa2aabbff1c948a612fa8e1
SHA1

78f19dc6003b1a9a4190246e3dc2108314b234e7
SHA256

993694328f3e8d1614dad8e5f964d447b593236083dea4ef95af85bf920898f0
SHA512

213ec838030bf3124a2a279266ee9c14acfaada1fb3027cde30df325c69e296b04c4895c87773661ccc9d716ab62080a6814b951ae0d3eadc71a49dba453c847
SSDEEP

49152:pC7NE3X1v42S1mqRlwjWNHgZUkC5CfXYe:gxE3Fw2S1FujWNHyCyXYe

Score

10^/10

adwind persistence

Malware Config

Targets

- Target
  
  993694328f3e8d1614dad8e5f964d447b593236083dea4ef95af85bf920898f0.jar
- Size
  
  1.9MB
- MD5
  
  7b94b622aaa2aabbff1c948a612fa8e1
- SHA1
  
  78f19dc6003b1a9a4190246e3dc2108314b234e7
- SHA256
  
  993694328f3e8d1614dad8e5f964d447b593236083dea4ef95af85bf920898f0
- SHA512
  
  213ec838030bf3124a2a279266ee9c14acfaada1fb3027cde30df325c69e296b04c4895c87773661ccc9d716ab62080a6814b951ae0d3eadc71a49dba453c847
- SSDEEP
  
  49152:pC7NE3X1v42S1mqRlwjWNHgZUkC5CfXYe:gxE3Fw2S1FujWNHyCyXYe
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2