MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 735d7bdff24c82f82f5e96deab6543f3d4b8ea19624e1b2cee484dee968b33ef. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Adwind


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 735d7bdff24c82f82f5e96deab6543f3d4b8ea19624e1b2cee484dee968b33ef
SHA3-384 hash: b70cf1e885d66ff8be27b6cae29134f84ea9fd78261fd0d06cdf13aef4603ff7ec49e32007329943379265e607014bbf
SHA1 hash: 16ba76652f090cde023a71ea8e7e2ec82c5f5336
MD5 hash: 698184d68063df30d63b33155b63852e
humanhash: foxtrot-five-mars-shade
File name:698184d68063df30d63b33155b63852e.jar
Download: download sample
Signature Adwind
File size:408'056 bytes
First seen:2020-06-12 12:52:12 UTC
Last seen:Never
File type:Java file jar
MIME type:application/java-archive
ssdeep 12288:U4SP114CpVvULfRh+lBbpCSS9eNcvH5SBb9IC3U9:U44p8LfuBbpC19eYH5Yb9JU9
TLSH BD942308EEC6A579D24AFEB4431B4877FFE42529C09DE37A0CE1ED6B9540E43D50E688
Reporter abuse_ch
Tags:Adwind jar RAT


Avatar
abuse_ch
Adwind RAT C2:
212.114.52.236:9932

Intelligence


File Origin
# of uploads :
1
# of downloads :
153
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-JAVA.Trojan.AdWind
Status:
Malicious
First seen:
2020-06-11 15:28:35 UTC
AV detection:
16 of 31 (51.61%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Adwind

Java file jar 735d7bdff24c82f82f5e96deab6543f3d4b8ea19624e1b2cee484dee968b33ef

(this sample)

  
Delivery method
Distributed via web download

Comments