adwind | 7784b23007c00ac42511678523456839fb6eab73d65f539caa8a85534f6ae1b0 | Triage

Sharing

General

Target

test.jar
Size

639KB
Sample

241130-qdg3asvkbs
MD5

c73edd8ecb615678bafa65707b779b8c
SHA1

2feb321b930e06b78d45c31d42f533ab0a7aaf03
SHA256

7784b23007c00ac42511678523456839fb6eab73d65f539caa8a85534f6ae1b0
SHA512

1a2cccccf4179cf2fcfa44b0c0b745f7c09320d8769c90d217908c820a7d060676a2fc55f21d826b0453b534eb8d36a8c72a5b29948d91efda72c1d66ace9977
SSDEEP

12288:ifHdQZ/XntIH94FRIFYzge/jRj+BrANqfugiJyRJo3UuE2Z8SW9Dki:if9QZ9Id4XLzget++qfX4ZUuZZ/W9Dki

Score

10^/10

adwind discovery persistence

Malware Config

Targets

- Target
  
  test.jar
- Size
  
  639KB
- MD5
  
  c73edd8ecb615678bafa65707b779b8c
- SHA1
  
  2feb321b930e06b78d45c31d42f533ab0a7aaf03
- SHA256
  
  7784b23007c00ac42511678523456839fb6eab73d65f539caa8a85534f6ae1b0
- SHA512
  
  1a2cccccf4179cf2fcfa44b0c0b745f7c09320d8769c90d217908c820a7d060676a2fc55f21d826b0453b534eb8d36a8c72a5b29948d91efda72c1d66ace9977
- SSDEEP
  
  12288:ifHdQZ/XntIH94FRIFYzge/jRj+BrANqfugiJyRJo3UuE2Z8SW9Dki:if9QZ9Id4XLzget++qfX4ZUuZZ/W9Dki
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence