General

  • Target

    221bf67d04e8c694d4a0eb3ac949d38266d026b5261b61177a801d6cc5bde13d

  • Size

    352KB

  • Sample

    231020-2tgl9add54

  • MD5

    fcb92e352d482d702dcf3a47579b12f2

  • SHA1

    29401566b727ee7960b69ba9ca98fc88992b8f8a

  • SHA256

    221bf67d04e8c694d4a0eb3ac949d38266d026b5261b61177a801d6cc5bde13d

  • SHA512

    d87c6c2b6802c9a3a4e11a6cd12dc36af49040b416f9fe7cf70a64509060aeca9e0bd3a964d845456d65cc49fe27caafc63f5d0c4fc2e2db2b0824ae528d26c2

  • SSDEEP

    1536:fiRtp/YdUQtxreuTGm2imb3W/zPhh1TxYoVAUytu3t7q3H+4poS7E:fAAdrt9euimwWzPhrW/A3t7q137E

Malware Config

Targets

    • Target

      221bf67d04e8c694d4a0eb3ac949d38266d026b5261b61177a801d6cc5bde13d

    • Size

      352KB

    • MD5

      fcb92e352d482d702dcf3a47579b12f2

    • SHA1

      29401566b727ee7960b69ba9ca98fc88992b8f8a

    • SHA256

      221bf67d04e8c694d4a0eb3ac949d38266d026b5261b61177a801d6cc5bde13d

    • SHA512

      d87c6c2b6802c9a3a4e11a6cd12dc36af49040b416f9fe7cf70a64509060aeca9e0bd3a964d845456d65cc49fe27caafc63f5d0c4fc2e2db2b0824ae528d26c2

    • SSDEEP

      1536:fiRtp/YdUQtxreuTGm2imb3W/zPhh1TxYoVAUytu3t7q3H+4poS7E:fAAdrt9euimwWzPhrW/A3t7q137E

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks