chinese_generic_botnet | d827e8a5c9eeeb34245d584b15b00cad20a6773b0784f1f1276326e01e44c6d8 | Triage

Submit
Reports

Overview

overview

Static

static

3

d827e8a5c9...d8.exe

windows7-x64

d827e8a5c9...d8.exe

windows10-2004-x64

Sharing

General

Target

d827e8a5c9eeeb34245d584b15b00cad20a6773b0784f1f1276326e01e44c6d8
Size

352KB
Sample

231026-1x1c4aad44
MD5

8af855bc6f135bf75d88a8312f5d1b7b
SHA1

09b29a0c771f31132f57d207deaea60b261aa03c
SHA256

d827e8a5c9eeeb34245d584b15b00cad20a6773b0784f1f1276326e01e44c6d8
SHA512

ec4785b575269018ee15d25d1a1efb9a313b57ae9a19b50c52c8f02afa53334a233cced54137f226487c3d917dd53fad0fdded012dbc124dbb180aefa06cf392
SSDEEP

3072:fAAdrtFV2GenT0cTtm2LAQSXVqjzpYfJhJw7E:Vx2GenQ67wk3pyJhJw

Score

10^/10

chinese_generic_botnet botnet persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d827e8a5c9eeeb34245d584b15b00cad20a6773b0784f1f1276326e01e44c6d8.exe

Resource

win7-20231023-en

chinese_generic_botnet botnet

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

d827e8a5c9eeeb34245d584b15b00cad20a6773b0784f1f1276326e01e44c6d8.exe

Resource

win10v2004-20231023-en

chinese_generic_botnet botnet persistence

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  d827e8a5c9eeeb34245d584b15b00cad20a6773b0784f1f1276326e01e44c6d8
- Size
  
  352KB
- MD5
  
  8af855bc6f135bf75d88a8312f5d1b7b
- SHA1
  
  09b29a0c771f31132f57d207deaea60b261aa03c
- SHA256
  
  d827e8a5c9eeeb34245d584b15b00cad20a6773b0784f1f1276326e01e44c6d8
- SHA512
  
  ec4785b575269018ee15d25d1a1efb9a313b57ae9a19b50c52c8f02afa53334a233cced54137f226487c3d917dd53fad0fdded012dbc124dbb180aefa06cf392
- SSDEEP
  
  3072:fAAdrtFV2GenT0cTtm2LAQSXVqjzpYfJhJw7E:Vx2GenQ67wk3pyJhJw
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnetpersistence

© 2018-2025

Terms | Privacy