chinese_generic_botnet | 361ac5b6f19a557a7e592452c78316e940e2d9f45297db67f97ae53e1b1a7b40 | Triage

Sharing

General

Target

af6d8f1ad9a7024c1036956944628480
Size

352KB
Sample

240229-zjezkace48
MD5

af6d8f1ad9a7024c1036956944628480
SHA1

602b3777aaea1b77fb7d303ca1e3bf4df1abd97d
SHA256

361ac5b6f19a557a7e592452c78316e940e2d9f45297db67f97ae53e1b1a7b40
SHA512

54d9d35ef3ef8e6531bb0ffa59de4b878f81a5de876e0d73515f16d52a936f144116aef139f707021b15b0c54f42a8a27fa62bc99969fcf44a927791a5cc13ab
SSDEEP

1536:fiRtp/YdUQtaWacCHZpR3KSuvgiRPfhHQNP6fDOMeAr3TWlgYQg1NV7E:fAAdrtajT7R3OgiRxHQBiDpY57E

Score

10^/10

chinese_generic_botnet botnet persistence

Malware Config

Targets

- Target
  
  af6d8f1ad9a7024c1036956944628480
- Size
  
  352KB
- MD5
  
  af6d8f1ad9a7024c1036956944628480
- SHA1
  
  602b3777aaea1b77fb7d303ca1e3bf4df1abd97d
- SHA256
  
  361ac5b6f19a557a7e592452c78316e940e2d9f45297db67f97ae53e1b1a7b40
- SHA512
  
  54d9d35ef3ef8e6531bb0ffa59de4b878f81a5de876e0d73515f16d52a936f144116aef139f707021b15b0c54f42a8a27fa62bc99969fcf44a927791a5cc13ab
- SSDEEP
  
  1536:fiRtp/YdUQtaWacCHZpR3KSuvgiRPfhHQNP6fDOMeAr3TWlgYQg1NV7E:fAAdrtajT7R3OgiRxHQBiDpY57E
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetpersistence

behavioral2

chinese_generic_botnetbotnetpersistence