chinese_generic_botnet | be49471a38dfbcc05c83be99f98b8b3e4c1f5dbd5cf6c7d1b4ac08e0ad724f26 | Triage

Sharing

General

Target

be49471a38dfbcc05c83be99f98b8b3e4c1f5dbd5cf6c7d1b4ac08e0ad724f26
Size

3.0MB
Sample

231209-hp3t5sgfh4
MD5

1b3be19b2a8b30d525afe570130fd228
SHA1

9c6c3164299cbc7959b839901bde659c6c0a6367
SHA256

be49471a38dfbcc05c83be99f98b8b3e4c1f5dbd5cf6c7d1b4ac08e0ad724f26
SHA512

6af3e18d419298726e32c25f97176f9cd69430e9d07f712174c06d622a2098f3c24548c3d33ce746958adc2a48387d2b111c66c09222390da56f9d1e2184cdd6
SSDEEP

49152:b/Dxi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjC7:b/DT0uDhEv4n4M

Score

10^/10

chinese_generic_botnet botnet persistence

Malware Config

Targets

- Target
  
  be49471a38dfbcc05c83be99f98b8b3e4c1f5dbd5cf6c7d1b4ac08e0ad724f26
- Size
  
  3.0MB
- MD5
  
  1b3be19b2a8b30d525afe570130fd228
- SHA1
  
  9c6c3164299cbc7959b839901bde659c6c0a6367
- SHA256
  
  be49471a38dfbcc05c83be99f98b8b3e4c1f5dbd5cf6c7d1b4ac08e0ad724f26
- SHA512
  
  6af3e18d419298726e32c25f97176f9cd69430e9d07f712174c06d622a2098f3c24548c3d33ce746958adc2a48387d2b111c66c09222390da56f9d1e2184cdd6
- SSDEEP
  
  49152:b/Dxi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjC7:b/DT0uDhEv4n4M
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetpersistence

behavioral2

chinese_generic_botnetbotnetpersistence