Overview

overview

10

Static

static

3

92349dddb5...bb.exe

windows7-x64

10

92349dddb5...bb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92349dddb5f9f274b30358a78b8eb1d88df9cca2937663f256fb7c2c4d756cbb

  • Size

    5.8MB

  • Sample

    230810-nqwp4sec51

  • MD5

    ced08f8395b6a15695f274634dd4ae84

  • SHA1

    64354574c1a2f6e0b9be3985770169a29d0e7ba7

  • SHA256

    92349dddb5f9f274b30358a78b8eb1d88df9cca2937663f256fb7c2c4d756cbb

  • SHA512

    3dfd94f34c38739ea12c81eb9a6e0d3d8c03645f9ad5b264ef5d2e1bf7ddbc927ebaea442c0f0406adea0b27d4cc484eff7c91118aa0ce74eb5b576cb3d40dec

  • SSDEEP

    98304:AqVQ4tml/iUm4XHb8vFtYkQprSz9rAmLJHORm6UJamI3LeojzZARZpkAdcc6IjWF:/J+jX7oDarSpru+W3KMZkvdagNXhJs0I

Score
10/10
chinese_generic_botnetbotnetpersistence

Malware Config

Targets

    • Target

      92349dddb5f9f274b30358a78b8eb1d88df9cca2937663f256fb7c2c4d756cbb

    • Size

      5.8MB

    • MD5

      ced08f8395b6a15695f274634dd4ae84

    • SHA1

      64354574c1a2f6e0b9be3985770169a29d0e7ba7

    • SHA256

      92349dddb5f9f274b30358a78b8eb1d88df9cca2937663f256fb7c2c4d756cbb

    • SHA512

      3dfd94f34c38739ea12c81eb9a6e0d3d8c03645f9ad5b264ef5d2e1bf7ddbc927ebaea442c0f0406adea0b27d4cc484eff7c91118aa0ce74eb5b576cb3d40dec

    • SSDEEP

      98304:AqVQ4tml/iUm4XHb8vFtYkQprSz9rAmLJHORm6UJamI3LeojzZARZpkAdcc6IjWF:/J+jX7oDarSpru+W3KMZkvdagNXhJs0I

    Score
    10/10
    chinese_generic_botnetbotnetpersistence

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet payload

      botnet

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks