Overview

overview

10

Static

static

迪拜女�...md.exe

windows7_x64

10

迪拜女�...md.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    迪拜女狗推被轮奸暴打视频MV.rar

  • Size

    318KB

  • Sample

    210922-zsrdysgeaj

  • MD5

    4ca179309d597aa93ab935503f06f89e

  • SHA1

    090f82ec6f15dfa89653dd4f78fa31db223a541b

  • SHA256

    ebc9a58d0952529700751709eff477dfcc97b2e65be005a6596494ffff4d0408

  • SHA512

    c60012380879c5cc12c39c3bf5128c89182dac66b71e9ad506819e4265f4ad77b6a1f0234e188409c9a63719182bae08e74390ec330671ab0a0c2a6f309665fd

Score
10/10
chinese_generic_botnetbotnetpersistence

Malware Config

Targets

    • Target

      迪拜女狗推被轮奸暴打视频MV.cmd

    • Size

      1.1MB

    • MD5

      90c162c3d97004300742705644d38258

    • SHA1

      ece6ec1c15b21e8eb848016093b204d4fd9b39f5

    • SHA256

      7ba1d6484541570ac5e0b3d035164534312c32d4d7bbe330e4704a142f9f6ff2

    • SHA512

      2c1b9692178095cf6f4800f8e09f6575fa520335b6b5c51da4ba043e88a409f0ddf1abb2fdc1cacce3c9f97154d4de29a0bf6da7e683ab43bc21b426510694ec

    Score
    10/10
    chinese_generic_botnetbotnetpersistence

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet Payload

      botnet

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks