General

  • Target

    a8bbfac451711da3db879e232ae98ad9f273bcb226e96c5ce6dce7d551356282

  • Size

    552KB

  • Sample

    240119-jkz35aheam

  • MD5

    270821202d9cf29cacbf56c7c7b59c83

  • SHA1

    466c1f7561f8c7b98fc5a263e3039614d9f54699

  • SHA256

    a8bbfac451711da3db879e232ae98ad9f273bcb226e96c5ce6dce7d551356282

  • SHA512

    74b18534afe155d3c34abe5f15b4a17f0fea04c1cd7f928d8f4e97da9aa4882ac121d0f841ce2850bb110b3b19a760349bb1c4d04485e127894d68c7b545e029

  • SSDEEP

    3072:R5OsiQ79xzUcbK9LK/fzuaCrutJU14DMkV8JiyqFRMGcwXgmNeKqFBFgQwNAe:v7hoBO/fzxa4DMkV84yqFK0QhFQ

Malware Config

Targets

    • Target

      a8bbfac451711da3db879e232ae98ad9f273bcb226e96c5ce6dce7d551356282

    • Size

      552KB

    • MD5

      270821202d9cf29cacbf56c7c7b59c83

    • SHA1

      466c1f7561f8c7b98fc5a263e3039614d9f54699

    • SHA256

      a8bbfac451711da3db879e232ae98ad9f273bcb226e96c5ce6dce7d551356282

    • SHA512

      74b18534afe155d3c34abe5f15b4a17f0fea04c1cd7f928d8f4e97da9aa4882ac121d0f841ce2850bb110b3b19a760349bb1c4d04485e127894d68c7b545e029

    • SSDEEP

      3072:R5OsiQ79xzUcbK9LK/fzuaCrutJU14DMkV8JiyqFRMGcwXgmNeKqFBFgQwNAe:v7hoBO/fzxa4DMkV84yqFK0QhFQ

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks