adwind | 779pro[.]jar

General

Target
779pro.jar
Size 84KB
Sample260730-pg9faa1vhz
SHA256 197b50495332e2500a6172e60f954a4a9baf94db133b16238c563257dfb60592
MD5 2b6de2c2a3fe1c68b74691e76208daa8
SHA1 e349f60257fdfbf7db0cf8b54d8385b60c853575
SHA512 e19f01024b19970307d848751e2fa94daf11de57e48c9ac063a2647d48c644e851a24122ac74dc4212a6afbba9de878e4c015f39e781fb0897ed2c9c00300e63
SSDEEP 1536:sj4OlIZ6rdWTAGmGfg28V99PbmBM+br0mHtNQ465eo/HX9KXI9HTHX4MYh:sMpWWTAy+W3br06tNmeo/HX8Y93e
TLSH
T1128302D56DE9EB26E16B2E77B630077C3D35044E1D2586AE9F720A04AD6026BF333874
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

trojan adwind

Family: AdWind
A Java-based RAT family operated as malware-as-a-service.
trojan adwind

JAR file contains resources related to AdWind 1 IoCs

This JAR file potentially contains loader stubs used by the AdWind RAT.

resource	yara_rule
sample	family_adwind_stub

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
779pro.jar

SHA256 197b50495332e2500a6172e60f954a4a9baf94db133b16238c563257dfb60592
MD5 2b6de2c2a3fe1c68b74691e76208daa8
SHA1 e349f60257fdfbf7db0cf8b54d8385b60c853575
SHA512 e19f01024b19970307d848751e2fa94daf11de57e48c9ac063a2647d48c644e851a24122ac74dc4212a6afbba9de878e4c015f39e781fb0897ed2c9c00300e63
SSDEEP 1536:sj4OlIZ6rdWTAGmGfg28V99PbmBM+br0mHtNQ465eo/HX9KXI9HTHX4MYh:sMpWWTAy+W3br06tNmeo/HX8Y93e
TLSH
T1128302D56DE9EB26E16B2E77B630077C3D35044E1D2586AE9F720A04AD6026BF333874
MD5 SHA1 SHA512 SSDEEP TLSH

JAR file contains resources related to AdWind

This JAR file potentially contains loader stubs used by the AdWind RAT.
Unsigned JAR

Checks for missing JAR codesign signature.