chinese_generic_botnet | 0e3d8dca5987deef0c19850cec15f98e00b27d8bf5e4df7be75f51129a6fd86b | Triage

Sharing

General

Target

0e3d8dca5987deef0c19850cec15f98e00b27d8bf5e4df7be75f51129a6fd86b
Size

3.3MB
Sample

230828-baxw1seb84
MD5

fddedd7cb5fb16effca4196dc99e1b22
SHA1

13d9c9bb6824bc2677a01f5568d386f490c51c0f
SHA256

0e3d8dca5987deef0c19850cec15f98e00b27d8bf5e4df7be75f51129a6fd86b
SHA512

28d34ff0ff49b9c452d2478b38251d5d37ff104cde04d02a71d5c366809240797aeface72568a1c7fe97920a9fa2f6550928ce05f08fc7dd0dbf1d378f019c18
SSDEEP

49152:t/ZqDrioxi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjCz:t/ZYT0uDhEv4n4M

Score

10^/10

chinese_generic_botnet botnet persistence

Malware Config

Targets

- Target
  
  0e3d8dca5987deef0c19850cec15f98e00b27d8bf5e4df7be75f51129a6fd86b
- Size
  
  3.3MB
- MD5
  
  fddedd7cb5fb16effca4196dc99e1b22
- SHA1
  
  13d9c9bb6824bc2677a01f5568d386f490c51c0f
- SHA256
  
  0e3d8dca5987deef0c19850cec15f98e00b27d8bf5e4df7be75f51129a6fd86b
- SHA512
  
  28d34ff0ff49b9c452d2478b38251d5d37ff104cde04d02a71d5c366809240797aeface72568a1c7fe97920a9fa2f6550928ce05f08fc7dd0dbf1d378f019c18
- SSDEEP
  
  49152:t/ZqDrioxi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjCz:t/ZYT0uDhEv4n4M
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnetpersistence