chinese_generic_botnet | 3678158c73850cefbb39893957b895827f5c30d7b03ec20010b91d7ddb433440 | Triage

Submit
Reports

Overview

overview

Static

static

3678158c73...40.exe

windows7-x64

3678158c73...40.exe

windows10-2004-x64

Sharing

General

Target

3678158c73850cefbb39893957b895827f5c30d7b03ec20010b91d7ddb433440
Size

3.4MB
Sample

221016-eqnj3agha9
MD5

d9f897cefc1b3a353fadffc3929a7edf
SHA1

bf640502544049b5bf7dfb8904ceb28a4cde2cff
SHA256

3678158c73850cefbb39893957b895827f5c30d7b03ec20010b91d7ddb433440
SHA512

67a4077090c8cebdadd3031ab496ad115f4f4a878f26db77362947940fa4628f47745921f5f30510cca182bc5c689c7eab461b90bc035f0a26cbf94595aae30c
SSDEEP

49152:q7lJVUUHd1wDhlMWmBU0iXYlyY4nT20kdCMNDR9QtBnADEJSIibvw+:q7lJVfgDhlMWmBU0VQ9KHIu0vKEJMw+

Score

10^/10

chinese_generic_botnet botnet

Static task

static1

Behavioral task

behavioral1

Sample

3678158c73850cefbb39893957b895827f5c30d7b03ec20010b91d7ddb433440.exe

Resource

win7-20220901-en

chinese_generic_botnet botnet

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

3678158c73850cefbb39893957b895827f5c30d7b03ec20010b91d7ddb433440.exe

Resource

win10v2004-20220812-en

chinese_generic_botnet botnet

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  3678158c73850cefbb39893957b895827f5c30d7b03ec20010b91d7ddb433440
- Size
  
  3.4MB
- MD5
  
  d9f897cefc1b3a353fadffc3929a7edf
- SHA1
  
  bf640502544049b5bf7dfb8904ceb28a4cde2cff
- SHA256
  
  3678158c73850cefbb39893957b895827f5c30d7b03ec20010b91d7ddb433440
- SHA512
  
  67a4077090c8cebdadd3031ab496ad115f4f4a878f26db77362947940fa4628f47745921f5f30510cca182bc5c689c7eab461b90bc035f0a26cbf94595aae30c
- SSDEEP
  
  49152:q7lJVUUHd1wDhlMWmBU0iXYlyY4nT20kdCMNDR9QtBnADEJSIibvw+:q7lJVfgDhlMWmBU0VQ9KHIu0vKEJMw+
Score

10^/10

chinese_generic_botnet botnet
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Downloads MZ/PE file
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnet

© 2018-2025

Terms | Privacy