chinese_generic_botnet | 941421e492e1107087ecf6bff5d53f8095951c365529d3f5bc57b2047fecedcf | Triage

Sharing

General

Target

941421e492e1107087ecf6bff5d53f8095951c365529d3f5bc57b2047fecedcf
Size

3.0MB
Sample

230827-vpdw8sbh48
MD5

21f20b724106341ef2009f5b99639f16
SHA1

6f2ad560c32f0525d1196b39cfd1b12ce70d4280
SHA256

941421e492e1107087ecf6bff5d53f8095951c365529d3f5bc57b2047fecedcf
SHA512

bc25d352443c2cce2b9987b65e65079e2c46a4724880cdf15a75c9a223ae15c1de8a6c7ce5811b709f50f6a05d551e301886a52938f51f2664b58745efbd0e06
SSDEEP

49152:2/G9xi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjC7:2/G9T0uDhEv4n4M

Score

10^/10

chinese_generic_botnet botnet persistence

Malware Config

Targets

- Target
  
  941421e492e1107087ecf6bff5d53f8095951c365529d3f5bc57b2047fecedcf
- Size
  
  3.0MB
- MD5
  
  21f20b724106341ef2009f5b99639f16
- SHA1
  
  6f2ad560c32f0525d1196b39cfd1b12ce70d4280
- SHA256
  
  941421e492e1107087ecf6bff5d53f8095951c365529d3f5bc57b2047fecedcf
- SHA512
  
  bc25d352443c2cce2b9987b65e65079e2c46a4724880cdf15a75c9a223ae15c1de8a6c7ce5811b709f50f6a05d551e301886a52938f51f2664b58745efbd0e06
- SSDEEP
  
  49152:2/G9xi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjC7:2/G9T0uDhEv4n4M
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetpersistence

behavioral2

chinese_generic_botnetbotnetpersistence