chinese_generic_botnet | aefa0c41929cf9633f8b378e321554c10f70c33905232832d3ebd5c81cc54928 | Triage

Submit
Reports

Overview

overview

Static

static

8

tmp.exe

windows7-x64

tmp.exe

windows10-2004-x64

Sharing

General

Target

tmp
Size

406KB
Sample

221006-l9r5xshcen
MD5

8c0af89b680e836ad8836b155d782bb7
SHA1

81b1933ccaadea578c00a5ac9a2083ec3ca1b440
SHA256

aefa0c41929cf9633f8b378e321554c10f70c33905232832d3ebd5c81cc54928
SHA512

164f35efe69d5283a5b1c049f954dd5294384d846a8fcd0dfac838b8baea9c154109315c88c5c12690fa3240f973aceb68b7f8b55659e565713bfc9d84895fa2
SSDEEP

6144:llOjQblatxYnJt/wHoFN6WtljaJul+p6Zi:ll47YnJt/wHoFN6WtljaElI2i

Score

10^/10

chinese_generic_botnet botnet upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmp.exe

Resource

win7-20220812-en

chinese_generic_botnet botnet upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

tmp.exe

Resource

win10v2004-20220812-en

chinese_generic_botnet botnet upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  tmp
- Size
  
  406KB
- MD5
  
  8c0af89b680e836ad8836b155d782bb7
- SHA1
  
  81b1933ccaadea578c00a5ac9a2083ec3ca1b440
- SHA256
  
  aefa0c41929cf9633f8b378e321554c10f70c33905232832d3ebd5c81cc54928
- SHA512
  
  164f35efe69d5283a5b1c049f954dd5294384d846a8fcd0dfac838b8baea9c154109315c88c5c12690fa3240f973aceb68b7f8b55659e565713bfc9d84895fa2
- SSDEEP
  
  6144:llOjQblatxYnJt/wHoFN6WtljaJul+p6Zi:ll47YnJt/wHoFN6WtljaElI2i
Score

10^/10

chinese_generic_botnet botnet upx
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetupx

behavioral2

chinese_generic_botnetbotnetupx

© 2018-2025

Terms | Privacy