General

  • Target

    09de8e87fccb6144e30870d5a1d36087643afd70663c02ab02a1b55faea2edc8

  • Size

    552KB

  • Sample

    231127-tf61zshf7x

  • MD5

    d5c40cbeee9d446e72a7ff27b6ceabe7

  • SHA1

    1ba0f0427bb3908b05c9b7c96debf24cab855b70

  • SHA256

    09de8e87fccb6144e30870d5a1d36087643afd70663c02ab02a1b55faea2edc8

  • SHA512

    72d57c9893c22984f237d7c53ed5e89c5f909901e98361fdfc159b2aed12e6f84e8d0bd56bc0d6078465e68445cf766a5a41122e22a1adf32aca17f78e0ad87e

  • SSDEEP

    3072:g5OsiQ79xzUcbK9LK/fzuaCrutJUHW6p/1PHoJzpjRIphEpKpB/zmbNoDa3S+vRL:m7hoBO/fzx21/X/y5oDa3SIO7E

Malware Config

Targets

    • Target

      09de8e87fccb6144e30870d5a1d36087643afd70663c02ab02a1b55faea2edc8

    • Size

      552KB

    • MD5

      d5c40cbeee9d446e72a7ff27b6ceabe7

    • SHA1

      1ba0f0427bb3908b05c9b7c96debf24cab855b70

    • SHA256

      09de8e87fccb6144e30870d5a1d36087643afd70663c02ab02a1b55faea2edc8

    • SHA512

      72d57c9893c22984f237d7c53ed5e89c5f909901e98361fdfc159b2aed12e6f84e8d0bd56bc0d6078465e68445cf766a5a41122e22a1adf32aca17f78e0ad87e

    • SSDEEP

      3072:g5OsiQ79xzUcbK9LK/fzuaCrutJUHW6p/1PHoJzpjRIphEpKpB/zmbNoDa3S+vRL:m7hoBO/fzx21/X/y5oDa3SIO7E

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks