chinese_generic_botnet | fc8fee6db44791d4c1f760aa15955e762a6a248a4f0de55d2e8236c9f6235c8e | Triage

Submit
Reports

Overview

overview

Static

static

3

fc8fee6db4...8e.exe

windows7-x64

fc8fee6db4...8e.exe

windows10-2004-x64

Sharing

General

Target

fc8fee6db44791d4c1f760aa15955e762a6a248a4f0de55d2e8236c9f6235c8e
Size

4.9MB
Sample

231217-vh6nnsged8
MD5

071c933af96d7e3c46a38262d8fe2024
SHA1

b50ece28b9aa85efc0ee040275c3a6029cc927ae
SHA256

fc8fee6db44791d4c1f760aa15955e762a6a248a4f0de55d2e8236c9f6235c8e
SHA512

3bd6e212a775845479709933add0d67df5f0644b256c6b4fd61dbacc4b1a8eb9cdca30a2777c6f9a55a036c482349b87bf4199c1553734ac2096d0a68753d82d
SSDEEP

49152:D8NAsurg//nk7xi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjCzqx:oCsur+/k7T0uDhEv4n4Mf

Score

10^/10

chinese_generic_botnet botnet persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fc8fee6db44791d4c1f760aa15955e762a6a248a4f0de55d2e8236c9f6235c8e.exe

Resource

win7-20231129-en

chinese_generic_botnet botnet

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

fc8fee6db44791d4c1f760aa15955e762a6a248a4f0de55d2e8236c9f6235c8e.exe

Resource

win10v2004-20231215-en

chinese_generic_botnet botnet persistence

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  fc8fee6db44791d4c1f760aa15955e762a6a248a4f0de55d2e8236c9f6235c8e
- Size
  
  4.9MB
- MD5
  
  071c933af96d7e3c46a38262d8fe2024
- SHA1
  
  b50ece28b9aa85efc0ee040275c3a6029cc927ae
- SHA256
  
  fc8fee6db44791d4c1f760aa15955e762a6a248a4f0de55d2e8236c9f6235c8e
- SHA512
  
  3bd6e212a775845479709933add0d67df5f0644b256c6b4fd61dbacc4b1a8eb9cdca30a2777c6f9a55a036c482349b87bf4199c1553734ac2096d0a68753d82d
- SSDEEP
  
  49152:D8NAsurg//nk7xi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjCzqx:oCsur+/k7T0uDhEv4n4Mf
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnetpersistence

© 2018-2025

Terms | Privacy