chinese_generic_botnet | f3b3c91f14dcf90549dcca40ea58969d5f266ad3064d094425b180aa4c65abbb | Triage

Submit
Reports

Overview

overview

Static

static

3

f3b3c91f14...bb.exe

windows7-x64

f3b3c91f14...bb.exe

windows10-2004-x64

Sharing

General

Target

f3b3c91f14dcf90549dcca40ea58969d5f266ad3064d094425b180aa4c65abbb
Size

684KB
Sample

231230-n7wrfadbdm
MD5

003f20ecb022d0ef4addf2a894834d45
SHA1

7a2e574910faedbaaf31b3525d830f0f11215a93
SHA256

f3b3c91f14dcf90549dcca40ea58969d5f266ad3064d094425b180aa4c65abbb
SHA512

f63c1b429347fb1d18b57223403fb289abab3205178a9e6b4b9f900ab633d328fc5e018a3107a68a6718b43a8f9c717bb8505c6840876de83ffb1b576845d46f
SSDEEP

6144:6g8e1898E15W1VTAE5GE+/0jTd2YxFyl2XcGUjG/LCNrNn:6g8e18912lAEMZ0jpFxFzEJT

Score

10^/10

chinese_generic_botnet botnet

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f3b3c91f14dcf90549dcca40ea58969d5f266ad3064d094425b180aa4c65abbb.exe

Resource

win7-20231215-en

chinese_generic_botnet botnet

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

f3b3c91f14dcf90549dcca40ea58969d5f266ad3064d094425b180aa4c65abbb.exe

Resource

win10v2004-20231215-en

chinese_generic_botnet botnet

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  f3b3c91f14dcf90549dcca40ea58969d5f266ad3064d094425b180aa4c65abbb
- Size
  
  684KB
- MD5
  
  003f20ecb022d0ef4addf2a894834d45
- SHA1
  
  7a2e574910faedbaaf31b3525d830f0f11215a93
- SHA256
  
  f3b3c91f14dcf90549dcca40ea58969d5f266ad3064d094425b180aa4c65abbb
- SHA512
  
  f63c1b429347fb1d18b57223403fb289abab3205178a9e6b4b9f900ab633d328fc5e018a3107a68a6718b43a8f9c717bb8505c6840876de83ffb1b576845d46f
- SSDEEP
  
  6144:6g8e1898E15W1VTAE5GE+/0jTd2YxFyl2XcGUjG/LCNrNn:6g8e18912lAEMZ0jpFxFzEJT
Score

10^/10

chinese_generic_botnet botnet
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnet

© 2018-2025

Terms | Privacy