chinese_generic_botnet | 7980f73e5deb872d1d8a4535cc0e778542b9d37b85c2d0650ea26bb36d4c2846 | Triage

Sharing

General

Target

7980f73e5deb872d1d8a4535cc0e778542b9d37b85c2d0650ea26bb36d4c2846
Size

3.0MB
Sample

231019-jzka8agb93
MD5

48140984bf46ee76f0f2e7f6d0335858
SHA1

5174e4c82bb72754c70c3be4307c7100de27f430
SHA256

7980f73e5deb872d1d8a4535cc0e778542b9d37b85c2d0650ea26bb36d4c2846
SHA512

38f4c981d423f1b6df012b187e9415583a6fa952862c77d4087f8d6382c658906a5dc3e5e108639c588563515ac8bf1b65b6367fc7ad5381559fbd81d1a61390
SSDEEP

49152:b/fCr3xi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjC7:b/fCzT0uDhEv4n4M

Score

10^/10

chinese_generic_botnet botnet persistence

Malware Config

Targets

- Target
  
  7980f73e5deb872d1d8a4535cc0e778542b9d37b85c2d0650ea26bb36d4c2846
- Size
  
  3.0MB
- MD5
  
  48140984bf46ee76f0f2e7f6d0335858
- SHA1
  
  5174e4c82bb72754c70c3be4307c7100de27f430
- SHA256
  
  7980f73e5deb872d1d8a4535cc0e778542b9d37b85c2d0650ea26bb36d4c2846
- SHA512
  
  38f4c981d423f1b6df012b187e9415583a6fa952862c77d4087f8d6382c658906a5dc3e5e108639c588563515ac8bf1b65b6367fc7ad5381559fbd81d1a61390
- SSDEEP
  
  49152:b/fCr3xi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjC7:b/fCzT0uDhEv4n4M
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetpersistence

behavioral2

chinese_generic_botnetbotnetpersistence