General

  • Target

    马尼拉公厕碎尸女教师!只因不愿做校长情人.cmd

  • Size

    1.8MB

  • Sample

    210922-av7raaagg9

  • MD5

    61a6445842bfd501f8e8c63a18e899cd

  • SHA1

    5c2c9e20f5607534128265bbbd03794be01e9e1d

  • SHA256

    ec694d5b05f7aa43e3e701e40686039a38d6827e5e944ba73de07f31da18d608

  • SHA512

    96a7f74e40b391c3a06a3da4a4b026862f13493f4307073e24e426046015db5b993de536c709f014c69474117442614dc53ec70efe039520723801374dedb8d9

Malware Config

Targets

    • Target

      马尼拉公厕碎尸女教师!只因不愿做校长情人.cmd

    • Size

      1.8MB

    • MD5

      61a6445842bfd501f8e8c63a18e899cd

    • SHA1

      5c2c9e20f5607534128265bbbd03794be01e9e1d

    • SHA256

      ec694d5b05f7aa43e3e701e40686039a38d6827e5e944ba73de07f31da18d608

    • SHA512

      96a7f74e40b391c3a06a3da4a4b026862f13493f4307073e24e426046015db5b993de536c709f014c69474117442614dc53ec70efe039520723801374dedb8d9

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet Payload

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks