adwind | a0655c2fc499d24fb6b24a09f127c17c4864324d43c8f129c33e42cc68bf987c | Triage

Sharing

General

Target

your hot sexy stub to send to people.jar
Size

639KB
Sample

250127-x1lgkasqgq
MD5

0c0b1c4664d79734ae680bf8ea542a9b
SHA1

46e41de70f1e946f26d1c80240605d693fc74fb0
SHA256

a0655c2fc499d24fb6b24a09f127c17c4864324d43c8f129c33e42cc68bf987c
SHA512

1d649a7b490e1870c0799e2a65dfcb20c18bdd5438caa874150828e1786c258746f427ebcd3f5685c957c271d8f6e7e8d374fba73fe203a1cdca6b49ca8c57a7
SSDEEP

12288:GvbtQZ/fP5krp4VlYVo3gK/3RT+BCWN+JLggtSR8N3uuk2B0Sp7DAW:GvBQZZkV4jb3gKJuj+JMenuu5BHp7DAW

Score

10^/10

adwind discovery persistence

Malware Config

Targets

- Target
  
  your hot sexy stub to send to people.jar
- Size
  
  639KB
- MD5
  
  0c0b1c4664d79734ae680bf8ea542a9b
- SHA1
  
  46e41de70f1e946f26d1c80240605d693fc74fb0
- SHA256
  
  a0655c2fc499d24fb6b24a09f127c17c4864324d43c8f129c33e42cc68bf987c
- SHA512
  
  1d649a7b490e1870c0799e2a65dfcb20c18bdd5438caa874150828e1786c258746f427ebcd3f5685c957c271d8f6e7e8d374fba73fe203a1cdca6b49ca8c57a7
- SSDEEP
  
  12288:GvbtQZ/fP5krp4VlYVo3gK/3RT+BCWN+JLggtSR8N3uuk2B0Sp7DAW:GvBQZZkV4jb3gKJuj+JMenuu5BHp7DAW
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2