adwind | 7808c4be131e543caf2e9631b4c0662dc3dc9bab48b558fd8aab81190aa9ea2e | Triage

Submit
Reports

Overview

overview

Static

static

3

7808c4be13...2e.exe

windows7-x64

7808c4be13...2e.exe

windows10-2004-x64

Sharing

General

Target

7808c4be131e543caf2e9631b4c0662dc3dc9bab48b558fd8aab81190aa9ea2e
Size

629KB
Sample

241105-aef9dsspem
MD5

793cfdff72eb3163f704c3f9b3b3c717
SHA1

61534379b1cd8d8f8280b676972c28b30d7a0484
SHA256

7808c4be131e543caf2e9631b4c0662dc3dc9bab48b558fd8aab81190aa9ea2e
SHA512

c4f532662fa063fd05a115e8a6c883204dbc2fab2c66378d448625d979a730d719d620bee3988bffec5bc4ea7bf46e6bafc0b0b1bcead0082f44ff834aa306ea
SSDEEP

12288:0pdVfrKp5SBUOvkD/gKVGDHszAVXMG2n+z2x0K73AVdxGbw6H3MLVi:0pd9K7MlGXwz+AV8G2OpvcwL

Score

10^/10

adwind trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7808c4be131e543caf2e9631b4c0662dc3dc9bab48b558fd8aab81190aa9ea2e.exe

Resource

win7-20241010-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

7808c4be131e543caf2e9631b4c0662dc3dc9bab48b558fd8aab81190aa9ea2e.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  7808c4be131e543caf2e9631b4c0662dc3dc9bab48b558fd8aab81190aa9ea2e
- Size
  
  629KB
- MD5
  
  793cfdff72eb3163f704c3f9b3b3c717
- SHA1
  
  61534379b1cd8d8f8280b676972c28b30d7a0484
- SHA256
  
  7808c4be131e543caf2e9631b4c0662dc3dc9bab48b558fd8aab81190aa9ea2e
- SHA512
  
  c4f532662fa063fd05a115e8a6c883204dbc2fab2c66378d448625d979a730d719d620bee3988bffec5bc4ea7bf46e6bafc0b0b1bcead0082f44ff834aa306ea
- SSDEEP
  
  12288:0pdVfrKp5SBUOvkD/gKVGDHszAVXMG2n+z2x0K73AVdxGbw6H3MLVi:0pd9K7MlGXwz+AV8G2OpvcwL
Score

10^/10

adwind trojan
- AdWind
  A Java-based RAT family operated as malware-as-a-service.
  trojan adwind
- Adwind family
  adwind
- Class file contains resources related to AdWind
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy