General

  • Target

    c24ecbf05fd97928887f593b8347d30017b6d8d8be4f031fbf4aaab9b25bfed1

  • Size

    552KB

  • Sample

    240118-n5d4lsbagk

  • MD5

    9417aad2e1eb1e4bca008cf35b8b1e4a

  • SHA1

    a823d30fc0e175a166c1d1279f03bd9741ff7dcd

  • SHA256

    c24ecbf05fd97928887f593b8347d30017b6d8d8be4f031fbf4aaab9b25bfed1

  • SHA512

    95ee88586aa4e87f3591f1822ccc829591d9492af510c2a8d0b060e7c8c07d5195203d92261790510785740b19df900bce6daf2fcf9e0fa42fc48520c76628da

  • SSDEEP

    3072:l5OsiQ79xzUcbK9LK/fzuaCrutJU1Vvp7V/omYGWVcBVEeMVP9RiyItA/Ow:j7hoBO/fzx2p7V/omYGWyMVVRiZ

Malware Config

Targets

    • Target

      c24ecbf05fd97928887f593b8347d30017b6d8d8be4f031fbf4aaab9b25bfed1

    • Size

      552KB

    • MD5

      9417aad2e1eb1e4bca008cf35b8b1e4a

    • SHA1

      a823d30fc0e175a166c1d1279f03bd9741ff7dcd

    • SHA256

      c24ecbf05fd97928887f593b8347d30017b6d8d8be4f031fbf4aaab9b25bfed1

    • SHA512

      95ee88586aa4e87f3591f1822ccc829591d9492af510c2a8d0b060e7c8c07d5195203d92261790510785740b19df900bce6daf2fcf9e0fa42fc48520c76628da

    • SSDEEP

      3072:l5OsiQ79xzUcbK9LK/fzuaCrutJU1Vvp7V/omYGWVcBVEeMVP9RiyItA/Ow:j7hoBO/fzx2p7V/omYGWyMVVRiZ

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks