chinese_generic_botnet | 53b9a0465f0f42c412ba90058ed129e7e6c4c97f724f537a7e03c9931c8bbc60

Resubmissions

22/09/2021, 03:40

210922-d8nr4sbad510

20/09/2021, 08:58

210920-kxhv2sdec510

08/08/2021, 11:12

210808-6klsp4qpxn8

Sharing

Copy URL Twitter E-mail

General

Target
eufive_20210808-125605
Size 325KB
Sample210922-d8nr4sbad5
SHA256 53b9a0465f0f42c412ba90058ed129e7e6c4c97f724f537a7e03c9931c8bbc60
MD5 94b43aaf8dd6506835fd99917a412b9f
SHA1 17eb10f6f986eff21f49586b06e844784ab66dab
SHA512 614cd22f7ac4afa103a8995dbb30ae83f48156ba7759ab402e9929dcc7033c793b1aac6108ca8a29973ed552507f7e98a884000392c46137c9fdf183ade96797
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Targets

- Target
  eufive_20210808-125605
- Size 325KB
- SHA256 53b9a0465f0f42c412ba90058ed129e7e6c4c97f724f537a7e03c9931c8bbc60
- MD5 94b43aaf8dd6506835fd99917a412b9f
- SHA1 17eb10f6f986eff21f49586b06e844784ab66dab
- SHA512 614cd22f7ac4afa103a8995dbb30ae83f48156ba7759ab402e9929dcc7033c793b1aac6108ca8a29973ed552507f7e98a884000392c46137c9fdf183ade96797
- MD5 SHA1 SHA512
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet Payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Generic Chinese Botnet

Chinese Botnet Payload

Executes dropped EXE

Adds Run key to start application

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2