Overview

overview

10

Static

static

迪拜又�...md.exe

windows7_x64

10

迪拜又�...md.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    迪拜又出事了，DMCC两名女推广跳楼MP4.cmd

  • Size

    1.1MB

  • Sample

    210922-zxtd4sgebm

  • MD5

    90c162c3d97004300742705644d38258

  • SHA1

    ece6ec1c15b21e8eb848016093b204d4fd9b39f5

  • SHA256

    7ba1d6484541570ac5e0b3d035164534312c32d4d7bbe330e4704a142f9f6ff2

  • SHA512

    2c1b9692178095cf6f4800f8e09f6575fa520335b6b5c51da4ba043e88a409f0ddf1abb2fdc1cacce3c9f97154d4de29a0bf6da7e683ab43bc21b426510694ec

Score
10/10
chinese_generic_botnetbotnetpersistence

Malware Config

Targets

    • Target

      迪拜又出事了，DMCC两名女推广跳楼MP4.cmd

    • Size

      1.1MB

    • MD5

      90c162c3d97004300742705644d38258

    • SHA1

      ece6ec1c15b21e8eb848016093b204d4fd9b39f5

    • SHA256

      7ba1d6484541570ac5e0b3d035164534312c32d4d7bbe330e4704a142f9f6ff2

    • SHA512

      2c1b9692178095cf6f4800f8e09f6575fa520335b6b5c51da4ba043e88a409f0ddf1abb2fdc1cacce3c9f97154d4de29a0bf6da7e683ab43bc21b426510694ec

    Score
    10/10
    chinese_generic_botnetbotnetpersistence

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet Payload

      botnet

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks