General

  • Target

    09589c5f19e01a2e178975e7f88104bd11a9120df5434b162e5019ec3dfd2111

  • Size

    916KB

  • Sample

    240111-nr5z6sfgg4

  • MD5

    cadb95480c8b7c33dfc2bf44d2107efa

  • SHA1

    e66061e634952836c0079059dbd8e09303122c20

  • SHA256

    09589c5f19e01a2e178975e7f88104bd11a9120df5434b162e5019ec3dfd2111

  • SHA512

    6a7752ca1a55b64986c6496c8acf26f33be2bd281d94b522b9e1700374f394490119b175978193d3b7034c20e2a6282ad48cab21eb9cf7095afc1010872f6fd0

  • SSDEEP

    12288:n37lb7aduxxEvrsJzz4elgEjpc2Rl/YB:n37Z7XxEve2E9ZwB

Malware Config

Targets

    • Target

      09589c5f19e01a2e178975e7f88104bd11a9120df5434b162e5019ec3dfd2111

    • Size

      916KB

    • MD5

      cadb95480c8b7c33dfc2bf44d2107efa

    • SHA1

      e66061e634952836c0079059dbd8e09303122c20

    • SHA256

      09589c5f19e01a2e178975e7f88104bd11a9120df5434b162e5019ec3dfd2111

    • SHA512

      6a7752ca1a55b64986c6496c8acf26f33be2bd281d94b522b9e1700374f394490119b175978193d3b7034c20e2a6282ad48cab21eb9cf7095afc1010872f6fd0

    • SSDEEP

      12288:n37lb7aduxxEvrsJzz4elgEjpc2Rl/YB:n37Z7XxEve2E9ZwB

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks