General

  • Target

    e3e6119c5b2d1683ee93f18a796efdd13a5090f9d7146d18845c97dc92ca5476

  • Size

    656KB

  • Sample

    240331-l2b4qsae54

  • MD5

    5671fe7b1a6fbc02db733124cefe4c1a

  • SHA1

    517ab4eee67a6ed352bcf8b2f1e68cf76334d926

  • SHA256

    e3e6119c5b2d1683ee93f18a796efdd13a5090f9d7146d18845c97dc92ca5476

  • SHA512

    2e4fd770b2b14160a92219fab68fb8ce1293559b99f07710d26a0b4020fb1481d25b46783b72e554c785574c20f55dc043d8dd68e0170fc2b90f59dcd3381781

  • SSDEEP

    6144:wZ6ZA37ldV7aixUuxwtV0JbKTTatd/sUIdQt7Q:w37lb7aduxxs8d0FI

Malware Config

Targets

    • Target

      e3e6119c5b2d1683ee93f18a796efdd13a5090f9d7146d18845c97dc92ca5476

    • Size

      656KB

    • MD5

      5671fe7b1a6fbc02db733124cefe4c1a

    • SHA1

      517ab4eee67a6ed352bcf8b2f1e68cf76334d926

    • SHA256

      e3e6119c5b2d1683ee93f18a796efdd13a5090f9d7146d18845c97dc92ca5476

    • SHA512

      2e4fd770b2b14160a92219fab68fb8ce1293559b99f07710d26a0b4020fb1481d25b46783b72e554c785574c20f55dc043d8dd68e0170fc2b90f59dcd3381781

    • SSDEEP

      6144:wZ6ZA37ldV7aixUuxwtV0JbKTTatd/sUIdQt7Q:w37lb7aduxxs8d0FI

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks