adwind | svchost11[.]jar

General

Target
svchost11.jar
Size 62KB
Sample260427-gljfnae18j
SHA256 72fa918ce13bb5853a96d0cd424d60d3c9f82a36258d20d9a7a0450e6c00d657
MD5 ab94f67492c5e4a2b45bf46cd198f773
SHA1 9ca894b36826ae863462565f04a4ea010889ea5a
SHA512 f4094a0f565ca38d52438d3fa7da0859e9bbdeab4c3141bb48092117be65f7ae16f5817d9e41a82db2a514dce75de5f5161b1935ebe1a99da2e2b923a563a1c3
SSDEEP 1536:4cRc8ZUHaz2ku/IHdDU7i9QSY5s8BPDqVyIydahi:LW8KU27I5RW5BWHrhi
TLSH
T19853026CB89CD7B3DAA351BBC9211CCE6D72D14E66A4C30B81135592B812A1FC7978FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

trojan adwind

Family: AdWind
A Java-based RAT family operated as malware-as-a-service.
trojan adwind

JAR file contains resources related to AdWind 1 IoCs

This JAR file potentially contains loader stubs used by the AdWind RAT.

resource	yara_rule
sample	family_adwind_stub

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
svchost11.jar

SHA256 72fa918ce13bb5853a96d0cd424d60d3c9f82a36258d20d9a7a0450e6c00d657
MD5 ab94f67492c5e4a2b45bf46cd198f773
SHA1 9ca894b36826ae863462565f04a4ea010889ea5a
SHA512 f4094a0f565ca38d52438d3fa7da0859e9bbdeab4c3141bb48092117be65f7ae16f5817d9e41a82db2a514dce75de5f5161b1935ebe1a99da2e2b923a563a1c3
SSDEEP 1536:4cRc8ZUHaz2ku/IHdDU7i9QSY5s8BPDqVyIydahi:LW8KU27I5RW5BWHrhi
TLSH
T19853026CB89CD7B3DAA351BBC9211CCE6D72D14E66A4C30B81135592B812A1FC7978FC
MD5 SHA1 SHA512 SSDEEP TLSH

JAR file contains resources related to AdWind

This JAR file potentially contains loader stubs used by the AdWind RAT.
Unsigned JAR

Checks for missing JAR codesign signature.