Overview

overview

10

Static

static

3

c18d1615f3...8a.exe

windows7-x64

10

c18d1615f3...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c18d1615f31033b778fa906ee49fbdf4e5ce74ca5229a7f1d8844a52ae6a0b8a

  • Size

    540KB

  • Sample

    240119-jd6mbsaad6

  • MD5

    21a3275904b3c7d160f42263fb32a80b

  • SHA1

    419e01c3d6d6b90ca81d7a627a5719e32901e8f9

  • SHA256

    c18d1615f31033b778fa906ee49fbdf4e5ce74ca5229a7f1d8844a52ae6a0b8a

  • SHA512

    952cbb2a2a04ef6732fae271c75649cd664f12ccd0c7d1eda3bd45bc12080f8fe2aa56b6836901d8bcecd99a70df23b08aeaef8a26b0b116bda9436074a75be5

  • SSDEEP

    3072:A5OsiQ79xzUcbK9LK/fzuaCrutJUDpRfmm5yqiXO+Zoy/6ESh0Jz5OdRSu:G7hoBO/fzxUpFmkgXO+T/6EJJNaS

Score
10/10
chinese_generic_botnetbotnetpersistence

Malware Config

Targets

    • Target

      c18d1615f31033b778fa906ee49fbdf4e5ce74ca5229a7f1d8844a52ae6a0b8a

    • Size

      540KB

    • MD5

      21a3275904b3c7d160f42263fb32a80b

    • SHA1

      419e01c3d6d6b90ca81d7a627a5719e32901e8f9

    • SHA256

      c18d1615f31033b778fa906ee49fbdf4e5ce74ca5229a7f1d8844a52ae6a0b8a

    • SHA512

      952cbb2a2a04ef6732fae271c75649cd664f12ccd0c7d1eda3bd45bc12080f8fe2aa56b6836901d8bcecd99a70df23b08aeaef8a26b0b116bda9436074a75be5

    • SSDEEP

      3072:A5OsiQ79xzUcbK9LK/fzuaCrutJUDpRfmm5yqiXO+Zoy/6ESh0Jz5OdRSu:G7hoBO/fzxUpFmkgXO+T/6EJJNaS

    Score
    10/10
    chinese_generic_botnetbotnetpersistence

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet payload

      botnet

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks