chinese_generic_botnet | d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b | Triage

Sharing

General

Target

d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b
Size

352KB
Sample

240312-gnx2tsca28
MD5

3e5b99bff59727f494525f71a3587241
SHA1

32c4e7cb8b41fe57319104cc62eadcf180d85366
SHA256

d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b
SHA512

c2de226624c243f492a0818f0ab4f4e99edf0f67c82e686848fbaa3c10a02bad0e4f6e044fd8daca3e3952a042d4dc345072e61b13a8931973ec6f8249401ab0
SSDEEP

3072:fAAdrtc3D5M4/ElkM/QG9JBRgFASLioe7E:VC3+H/QGcFJk

Score

10^/10

chinese_generic_botnet botnet persistence

Malware Config

Targets

- Target
  
  d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b
- Size
  
  352KB
- MD5
  
  3e5b99bff59727f494525f71a3587241
- SHA1
  
  32c4e7cb8b41fe57319104cc62eadcf180d85366
- SHA256
  
  d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b
- SHA512
  
  c2de226624c243f492a0818f0ab4f4e99edf0f67c82e686848fbaa3c10a02bad0e4f6e044fd8daca3e3952a042d4dc345072e61b13a8931973ec6f8249401ab0
- SSDEEP
  
  3072:fAAdrtc3D5M4/ElkM/QG9JBRgFASLioe7E:VC3+H/QGcFJk
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetpersistence

behavioral2

chinese_generic_botnetbotnetpersistence