General
-
Target
0ef8fb38811c876792a8cc7832def5e5905df0c253ecc47998c18bc8ffb280cc
-
Size
728KB
-
Sample
220320-cx8gpsfaf2
-
MD5
dd2bca6daf4308b18afd9055b0584789
-
SHA1
67b997184106a4e238663d9ab7b2d1869b3869e4
-
SHA256
0ef8fb38811c876792a8cc7832def5e5905df0c253ecc47998c18bc8ffb280cc
-
SHA512
44f8653930f54b8dbfce192569f2e83e08f513945eb0be564458e256228484e607188979ad093c590d0ebf9e917c158d124ae319e9fc01f4233a0378710def14
Static task
static1
Behavioral task
behavioral1
Sample
0ef8fb38811c876792a8cc7832def5e5905df0c253ecc47998c18bc8ffb280cc.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
0ef8fb38811c876792a8cc7832def5e5905df0c253ecc47998c18bc8ffb280cc.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0ef8fb38811c876792a8cc7832def5e5905df0c253ecc47998c18bc8ffb280cc
-
Size
728KB
-
MD5
dd2bca6daf4308b18afd9055b0584789
-
SHA1
67b997184106a4e238663d9ab7b2d1869b3869e4
-
SHA256
0ef8fb38811c876792a8cc7832def5e5905df0c253ecc47998c18bc8ffb280cc
-
SHA512
44f8653930f54b8dbfce192569f2e83e08f513945eb0be564458e256228484e607188979ad093c590d0ebf9e917c158d124ae319e9fc01f4233a0378710def14
Score10/10-
Generic Chinese Botnet
A botnet originating from China which is currently unnamed publicly.
-
Chinese Botnet Payload
-
Executes dropped EXE
-
Adds Run key to start application
-