Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
21-02-2024 01:36
General
-
Target
57d55049a0bceaf021c28b7a7395c365e6402855b3122a8c165c381f5a7b1bd6.exe
-
Size
3.3MB
-
MD5
6a8e1430e7d9394ba37636e62be5e9fb
-
SHA1
f53b02f63ee7be4c5d7b0e03faab0102f4dca537
-
SHA256
57d55049a0bceaf021c28b7a7395c365e6402855b3122a8c165c381f5a7b1bd6
-
SHA512
7eb63dfbdf1b26d18768f1d99a82ee6544d635bed3f60790f7329df5c09f5e59a47a38016e20bc58a1341b17a8df524273c5b91ad7ada4342b47159d693b16d8
-
SSDEEP
49152:T0UdoogeHa+Fw0TNMC2yvOPVGpI3tzlGCGc7gTmiue7vVwtWv:PpNw0TNMC0PVsUFlGCGSgyia0
Malware Config
Signatures
-
Generic Chinese Botnet
A botnet originating from China which is currently unnamed publicly.
-
Chinese Botnet payload 4 IoCs
-
Executes dropped EXE 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\57d55049a0bceaf021c28b7a7395c365e6402855b3122a8c165c381f5a7b1bd6.exe"C:\Users\Admin\AppData\Local\Temp\57d55049a0bceaf021c28b7a7395c365e6402855b3122a8c165c381f5a7b1bd6.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Egygekk.exe"C:\Program Files (x86)\Egygekk.exe"1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Egygekk.exe"C:\Program Files (x86)\Egygekk.exe" Win72⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
MD56a8e1430e7d9394ba37636e62be5e9fb
SHA1f53b02f63ee7be4c5d7b0e03faab0102f4dca537
SHA25657d55049a0bceaf021c28b7a7395c365e6402855b3122a8c165c381f5a7b1bd6
SHA5127eb63dfbdf1b26d18768f1d99a82ee6544d635bed3f60790f7329df5c09f5e59a47a38016e20bc58a1341b17a8df524273c5b91ad7ada4342b47159d693b16d8
-
Filesize
7.7MB
-
Filesize
12KB
-
Filesize
124KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB