General
-
Target
马尼拉公厕碎尸女教师!只因不愿做校长情人.cmd
-
Size
1.8MB
-
Sample
210922-av7raaagg9
-
MD5
61a6445842bfd501f8e8c63a18e899cd
-
SHA1
5c2c9e20f5607534128265bbbd03794be01e9e1d
-
SHA256
ec694d5b05f7aa43e3e701e40686039a38d6827e5e944ba73de07f31da18d608
-
SHA512
96a7f74e40b391c3a06a3da4a4b026862f13493f4307073e24e426046015db5b993de536c709f014c69474117442614dc53ec70efe039520723801374dedb8d9
Static task
static1
Behavioral task
behavioral1
Sample
马尼拉公厕碎尸女教师!只因不愿做校长情人.cmd.exe
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
马尼拉公厕碎尸女教师!只因不愿做校长情人.cmd.exe
Resource
win10-en-20210920
Malware Config
Targets
-
-
Target
马尼拉公厕碎尸女教师!只因不愿做校长情人.cmd
-
Size
1.8MB
-
MD5
61a6445842bfd501f8e8c63a18e899cd
-
SHA1
5c2c9e20f5607534128265bbbd03794be01e9e1d
-
SHA256
ec694d5b05f7aa43e3e701e40686039a38d6827e5e944ba73de07f31da18d608
-
SHA512
96a7f74e40b391c3a06a3da4a4b026862f13493f4307073e24e426046015db5b993de536c709f014c69474117442614dc53ec70efe039520723801374dedb8d9
Score10/10-
Generic Chinese Botnet
A botnet originating from China which is currently unnamed publicly.
-
Chinese Botnet Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-