General

  • Target

    41528ff4cf8b1464557bb2ccbb3a8a42a5c97824d491aa78b86946614f3d04ba

  • Size

    508KB

  • Sample

    231021-kqpd9afb68

  • MD5

    e67ef61ab2e890ff30b1a2077d79dde4

  • SHA1

    34801dba0c8e83ae6d547cb5f1fa25a3302afb82

  • SHA256

    41528ff4cf8b1464557bb2ccbb3a8a42a5c97824d491aa78b86946614f3d04ba

  • SHA512

    50ec4a1155cf4fe89074c4127447cc60745720e0a0a12a32e3ae44e469f8173efb60c950e05a03efadb2cbf985815d0bbf992fe9f0eddbaa136667d31614595d

  • SSDEEP

    3072:h5OsiQ79xzUcbK9LK/fzuaCrutJUy6yQ9ie6kgR2voGXQ9jf4o7Qr7y1Sqy9At:f7hoBO/fzxb26kR8fPkny1Q

Malware Config

Targets

    • Target

      41528ff4cf8b1464557bb2ccbb3a8a42a5c97824d491aa78b86946614f3d04ba

    • Size

      508KB

    • MD5

      e67ef61ab2e890ff30b1a2077d79dde4

    • SHA1

      34801dba0c8e83ae6d547cb5f1fa25a3302afb82

    • SHA256

      41528ff4cf8b1464557bb2ccbb3a8a42a5c97824d491aa78b86946614f3d04ba

    • SHA512

      50ec4a1155cf4fe89074c4127447cc60745720e0a0a12a32e3ae44e469f8173efb60c950e05a03efadb2cbf985815d0bbf992fe9f0eddbaa136667d31614595d

    • SSDEEP

      3072:h5OsiQ79xzUcbK9LK/fzuaCrutJUy6yQ9ie6kgR2voGXQ9jf4o7Qr7y1Sqy9At:f7hoBO/fzxb26kR8fPkny1Q

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks