Overview

overview

10

Static

static

3

54fb2ada01...be.exe

windows7-x64

10

54fb2ada01...be.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54fb2ada01c02e922853066644b9524e4227e30e5ab15f91647556c72556a5be

  • Size

    541KB

  • Sample

    240119-mnzhjsccdm

  • MD5

    e114495b770c0f805e56b27c87b773de

  • SHA1

    eb287a589998b616b5adce1709eddd90ccf58a03

  • SHA256

    54fb2ada01c02e922853066644b9524e4227e30e5ab15f91647556c72556a5be

  • SHA512

    37f01779cfc97c1c8a8921588323880990eb45cef96a07e87e7d889aafa0516225d019079a6a64bb7fbcfa4b65dcbba09bac23a7934c8ffcd95207a9add25f1d

  • SSDEEP

    3072:A5OsiQ79xzUcbK9LK/fzuaCrutJUDpRfmm5yqiXO+Zoy/6ESh0Jz5OdRSu:G7hoBO/fzxUpFmkgXO+T/6EJJNaS

Score
10/10
chinese_generic_botnetbotnetpersistence

Malware Config

Targets

    • Target

      54fb2ada01c02e922853066644b9524e4227e30e5ab15f91647556c72556a5be

    • Size

      541KB

    • MD5

      e114495b770c0f805e56b27c87b773de

    • SHA1

      eb287a589998b616b5adce1709eddd90ccf58a03

    • SHA256

      54fb2ada01c02e922853066644b9524e4227e30e5ab15f91647556c72556a5be

    • SHA512

      37f01779cfc97c1c8a8921588323880990eb45cef96a07e87e7d889aafa0516225d019079a6a64bb7fbcfa4b65dcbba09bac23a7934c8ffcd95207a9add25f1d

    • SSDEEP

      3072:A5OsiQ79xzUcbK9LK/fzuaCrutJUDpRfmm5yqiXO+Zoy/6ESh0Jz5OdRSu:G7hoBO/fzxUpFmkgXO+T/6EJJNaS

    Score
    10/10
    chinese_generic_botnetbotnetpersistence

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet payload

      botnet

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks