Overview

overview

10

Static

static

3

bdf5c48621...39.exe

windows7-x64

10

bdf5c48621...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdf5c486211d8650da2c86e4864ee997ff6c752a53b52f9abf37b848ef90ee39

  • Size

    5.8MB

  • Sample

    230810-lrxbxsdd9y

  • MD5

    6fd9544ef1050f410c24a3c71a293b10

  • SHA1

    a99a35d13239ef43191113a3279425b51a5e38cc

  • SHA256

    bdf5c486211d8650da2c86e4864ee997ff6c752a53b52f9abf37b848ef90ee39

  • SHA512

    9ae03af9daf66f0056e8aec5a628f4c0870c22157e64d20ac485b2d0f8758ecbe91c6e8f71ac185b86273364fd691e03b4c3cf792ddd9697c450b6adaeac3762

  • SSDEEP

    98304:AqVQ4tml/iUm4XHb8vFtYkQorSz9rAmLJHORm6UJamI3LeojzZARZpkAdcc6IjWF:/J+jX7oDnrSpru+W3KMZkvdagNXhJs0I

Score
10/10
chinese_generic_botnetbotnetpersistence

Malware Config

Targets

    • Target

      bdf5c486211d8650da2c86e4864ee997ff6c752a53b52f9abf37b848ef90ee39

    • Size

      5.8MB

    • MD5

      6fd9544ef1050f410c24a3c71a293b10

    • SHA1

      a99a35d13239ef43191113a3279425b51a5e38cc

    • SHA256

      bdf5c486211d8650da2c86e4864ee997ff6c752a53b52f9abf37b848ef90ee39

    • SHA512

      9ae03af9daf66f0056e8aec5a628f4c0870c22157e64d20ac485b2d0f8758ecbe91c6e8f71ac185b86273364fd691e03b4c3cf792ddd9697c450b6adaeac3762

    • SSDEEP

      98304:AqVQ4tml/iUm4XHb8vFtYkQorSz9rAmLJHORm6UJamI3LeojzZARZpkAdcc6IjWF:/J+jX7oDnrSpru+W3KMZkvdagNXhJs0I

    Score
    10/10
    chinese_generic_botnetbotnetpersistence

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet payload

      botnet

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks