Overview

overview

10

Static

static

3

d7173fdee5...2b.exe

windows7-x64

10

d7173fdee5...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b

  • Size

    352KB

  • Sample

    240312-gnx2tsca28

  • MD5

    3e5b99bff59727f494525f71a3587241

  • SHA1

    32c4e7cb8b41fe57319104cc62eadcf180d85366

  • SHA256

    d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b

  • SHA512

    c2de226624c243f492a0818f0ab4f4e99edf0f67c82e686848fbaa3c10a02bad0e4f6e044fd8daca3e3952a042d4dc345072e61b13a8931973ec6f8249401ab0

  • SSDEEP

    3072:fAAdrtc3D5M4/ElkM/QG9JBRgFASLioe7E:VC3+H/QGcFJk

Score
10/10
chinese_generic_botnetbotnetpersistence

Malware Config

Targets

    • Target

      d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b

    • Size

      352KB

    • MD5

      3e5b99bff59727f494525f71a3587241

    • SHA1

      32c4e7cb8b41fe57319104cc62eadcf180d85366

    • SHA256

      d7173fdee59a7a5ffec7899bf9ce9f968535b05faa6884d88e8d006a015af12b

    • SHA512

      c2de226624c243f492a0818f0ab4f4e99edf0f67c82e686848fbaa3c10a02bad0e4f6e044fd8daca3e3952a042d4dc345072e61b13a8931973ec6f8249401ab0

    • SSDEEP

      3072:fAAdrtc3D5M4/ElkM/QG9JBRgFASLioe7E:VC3+H/QGcFJk

    Score
    10/10
    chinese_generic_botnetbotnetpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks