Overview

overview

10

Static

static

菲律宾�...at.exe

windows7_x64

10

菲律宾�...at.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    菲律宾警方发布了：6名中国菜农被当场击毙视频.bat

  • Size

    628KB

  • Sample

    210922-zzg4vsgebq

  • MD5

    6c07598dd1e69a3cc89babb648ba4752

  • SHA1

    af11e5b6763c232d84648f5ba7e52baf60c3aec2

  • SHA256

    6e8ab5a3a7188143d0130d5553690a1254a8bae199b24e4dd09e40c8f9361576

  • SHA512

    f171b0377f8a3b20cd0bb569149dc7c1ec3e1d5b05b3a012b7986358d4276110084b55d0b7f9a388434963ea71feecec5247cd120f22bc470238a2be25b7d937

Score
10/10
chinese_generic_botnetbotnetpersistence

Malware Config

Targets

    • Target

      菲律宾警方发布了：6名中国菜农被当场击毙视频.bat

    • Size

      628KB

    • MD5

      6c07598dd1e69a3cc89babb648ba4752

    • SHA1

      af11e5b6763c232d84648f5ba7e52baf60c3aec2

    • SHA256

      6e8ab5a3a7188143d0130d5553690a1254a8bae199b24e4dd09e40c8f9361576

    • SHA512

      f171b0377f8a3b20cd0bb569149dc7c1ec3e1d5b05b3a012b7986358d4276110084b55d0b7f9a388434963ea71feecec5247cd120f22bc470238a2be25b7d937

    Score
    10/10
    chinese_generic_botnetbotnetpersistence

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet Payload

      botnet

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks