chinese_generic_botnet | 69d50a52b45f1f7678aae6947709e872ca79f48955a67c5371151ac13e34e2ec | Triage

Sharing

General

Target

5272bd8d51e07e1ec3408724f1c626f9
Size

940KB
Sample

240111-eb1abaehb5
MD5

5272bd8d51e07e1ec3408724f1c626f9
SHA1

0fa552a6a2bd8f5416d89f33d98d754799829030
SHA256

69d50a52b45f1f7678aae6947709e872ca79f48955a67c5371151ac13e34e2ec
SHA512

a2ba1de254fa20e4b0c7936f459207ee0e1dda0b98f3d50f479d7b9b7c19f095a16e5d04e649dd1f41a105553c1984c5a9e7250d5c1671aab43959f53ff8bfe5
SSDEEP

12288:6r5veknr6jVJY0a+6C04JkO7b1KuiJXQVSSV:O5t6jHBN90Mb1z6aSS

Score

10^/10

chinese_generic_botnet botnet persistence

Malware Config

Targets

- Target
  
  5272bd8d51e07e1ec3408724f1c626f9
- Size
  
  940KB
- MD5
  
  5272bd8d51e07e1ec3408724f1c626f9
- SHA1
  
  0fa552a6a2bd8f5416d89f33d98d754799829030
- SHA256
  
  69d50a52b45f1f7678aae6947709e872ca79f48955a67c5371151ac13e34e2ec
- SHA512
  
  a2ba1de254fa20e4b0c7936f459207ee0e1dda0b98f3d50f479d7b9b7c19f095a16e5d04e649dd1f41a105553c1984c5a9e7250d5c1671aab43959f53ff8bfe5
- SSDEEP
  
  12288:6r5veknr6jVJY0a+6C04JkO7b1KuiJXQVSSV:O5t6jHBN90Mb1z6aSS
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnetpersistence