General
-
Target
3fae6d64257ab2ca526d3dc2f95112ce
-
Size
389KB
-
Sample
231225-187xbabda8
-
MD5
3fae6d64257ab2ca526d3dc2f95112ce
-
SHA1
40dfd8f0d0508192bfadf6404572555a564b0409
-
SHA256
0c0844b505753daea5f39249017ee053f50d3024ef5ac0e8e10bc2661d3a9054
-
SHA512
b7734c582c1a13bb905049222c0c61d20e689ed1541658b0f1b3c005e94a9ccfb47d41f2c76ec06c407bd1083b3b6b195c3b66546b514e967dad68ab0c86aaa8
-
SSDEEP
12288:Nl8zzlSw4tmznozmwdZd0nVJbhcTLO8lCz:7Jt0nmmwdZOVJbcG
Static task
static1
Behavioral task
behavioral1
Sample
“三明市”女菜农在缅因离职被高层性虐待致死“视频”曝光.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
“三明市”女菜农在缅因离职被高层性虐待致死“视频”曝光.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
“三明市”女菜农在缅因离职被高层性虐待致死“视频”曝光.bat
-
Size
1.7MB
-
MD5
baa4b1972a62349d9d07c0f67705dad1
-
SHA1
f179ae5b3ad0e534017e237c8e4ffa8a1f24068d
-
SHA256
0108dfda636ea3e4767b39912125875976805997a727ec8248a2e93a44e3e113
-
SHA512
53c2f775d777306fe41de0e3c8c4fc6ed25a8a4eb41762485d8698c651960c2d8acf6c47984379938e67384d72e5cd1913cbc092a42e08b635fe03cd28420e29
-
SSDEEP
49152:zCZyIF04swEI8AUYMQ7fTXLvjnb/z3rOiG6eyWKuCma+5dxVJtBlZ9R1pkQco0gO:zIyIcCZi
Score10/10-
Generic Chinese Botnet
A botnet originating from China which is currently unnamed publicly.
-
Chinese Botnet payload
-
Adds Run key to start application
-