General
- Target 240329-1mbxrabc84_pw_infected.zip
- Size 4KB
- Sample260516-ldh75sft6j
- SHA256 03e2bd9ee65fec033e4a0dd749174b3c8eb31ac57067bf0e377b7b9bacadb5b4
- MD5 5666b339548721e16b7dc0c58a9f5cf7
- SHA1 1d32e4eab28667bb26aee193955968aa151b270b
- SHA512 4128e8dafffc350a50663a6ae9d00ea35f57e5f5c1b358d2d43e97545705c55e2cebb5ddace7e714993402a8a0d333613a0fac55a03bb0866ba384752038c462
- SSDEEP 96:6pnJhSgWcOTmQH4R6LqKhxUN1Dj0Bu+QKI4JCfoI/s6oqpT16ROs6N3qTTxzdU7l:Qn5Ow6qKPUN1Hl2lI/s6oqJ1HqT7Uh
- TLSH T1C1A18E583F077051E53A3ABD6C539B41E26E3A4965E31532BF126794CBDC2D00C90FAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Adwind.jar
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Adwind.jar
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target Adwind.exe
- Size 5KB
- SHA256 bbc572cced7c94d63a7208f4aba4ed20d1350bef153b099035a86c95c8d96d4a
- MD5 fe537a3346590c04d81d357e3c4be6e8
- SHA1 b1285f1d8618292e17e490857d1bdf0a79104837
- SHA512 50a5c1ad99ee9f3a540cb30e87ebfdf7561f0a0ee35b3d06c394fa2bad06ca6088a04848ddcb25f449b3c98b89a91d1ba5859f1ed6737119b606968be250c8ce
- SSDEEP 96:w9fXh7CBF8l1cHRDOjY4YbiPkW7UW1g+dWi9sBSy3HQNm6wx2xC7vz5:GXh78hHRDOU4YWPk2J14i9E3ymBxW+
- TLSH T1E1C15CADBCB0E0BBED0B563240D17B8B6EB444A5978D580B4FA32C951979E91131BCD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: QNodeService
Trojan/stealer written in NodeJS and spread via Java downloader.