chinese_generic_botnet | 69d7973f1002d543c7e1935b95a4493ec29d0c21d3dc5e50d2f477868a914f70 | Triage

Submit
Reports

Overview

overview

Static

static

3

db3634519c...08.exe

windows7-x64

db3634519c...08.exe

windows10-2004-x64

Sharing

General

Target

db3634519c2d504f67f0ac5518d4c208
Size

312KB
Sample

240321-ksd2asfg87
MD5

db3634519c2d504f67f0ac5518d4c208
SHA1

752eaa1a95d1179ac825119d27c006ddeda41d6b
SHA256

69d7973f1002d543c7e1935b95a4493ec29d0c21d3dc5e50d2f477868a914f70
SHA512

3cca550e3fc9360f97b04c64172daface1e2a5f2b6508fc141f15214bf9e668a88e81ed487b40d926a944e0c71d35f2f97fb2066a66dfb4dab2f264410b6d751
SSDEEP

6144:JEeHlmxEW0qLFWfs/ZnGWvAljyyqI7rRgdixjTwa/RxJg:JTgTZWk/oWvARy9oRxHY

Score

10^/10

chinese_generic_botnet botnet persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

db3634519c2d504f67f0ac5518d4c208.exe

Resource

win7-20240215-en

chinese_generic_botnet botnet

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

db3634519c2d504f67f0ac5518d4c208.exe

Resource

win10v2004-20240226-en

chinese_generic_botnet botnet persistence

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  db3634519c2d504f67f0ac5518d4c208
- Size
  
  312KB
- MD5
  
  db3634519c2d504f67f0ac5518d4c208
- SHA1
  
  752eaa1a95d1179ac825119d27c006ddeda41d6b
- SHA256
  
  69d7973f1002d543c7e1935b95a4493ec29d0c21d3dc5e50d2f477868a914f70
- SHA512
  
  3cca550e3fc9360f97b04c64172daface1e2a5f2b6508fc141f15214bf9e668a88e81ed487b40d926a944e0c71d35f2f97fb2066a66dfb4dab2f264410b6d751
- SSDEEP
  
  6144:JEeHlmxEW0qLFWfs/ZnGWvAljyyqI7rRgdixjTwa/RxJg:JTgTZWk/oWvARy9oRxHY
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnetpersistence

© 2018-2024

Terms | Privacy