adwind | 670d6a346511bbca8ba76eec9e967dc2891d757ff9d4524b2cf35a5b4fd55356 | Triage

Sharing

General

Target

670d6a346511bbca8ba76eec9e967dc2891d757ff9d4524b2cf35a5b4fd55356
Size

639KB
Sample

250219-amz2gavjy3
MD5

03e4a19e7d3a730b13caafbd0e133fb4
SHA1

2e28bb77265f764f6c72bd24833a73e3a26d0383
SHA256

670d6a346511bbca8ba76eec9e967dc2891d757ff9d4524b2cf35a5b4fd55356
SHA512

bf3eccb669c2a98b19f5988f859c35df708abaef35b84249b82c8834915089288c6d7d3f0f6a24e5110606f22b99c5dcc1f9523af18099e478c92c2fa5788e4c
SSDEEP

12288:e3LFQp/3X5MD54V94loXgq/nRr+t6eNG57gI9qRE13euc2JcSJzDwa:e3ZQp5M947zXgq5SzG5cGHeuhJfJzDwa

Score

10^/10

adwind persistence

Malware Config

Targets

- Target
  
  670d6a346511bbca8ba76eec9e967dc2891d757ff9d4524b2cf35a5b4fd55356
- Size
  
  639KB
- MD5
  
  03e4a19e7d3a730b13caafbd0e133fb4
- SHA1
  
  2e28bb77265f764f6c72bd24833a73e3a26d0383
- SHA256
  
  670d6a346511bbca8ba76eec9e967dc2891d757ff9d4524b2cf35a5b4fd55356
- SHA512
  
  bf3eccb669c2a98b19f5988f859c35df708abaef35b84249b82c8834915089288c6d7d3f0f6a24e5110606f22b99c5dcc1f9523af18099e478c92c2fa5788e4c
- SSDEEP
  
  12288:e3LFQp/3X5MD54V94loXgq/nRr+t6eNG57gI9qRE13euc2JcSJzDwa:e3ZQp5M947zXgq5SzG5cGHeuhJfJzDwa
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2