chinese_generic_botnet | 27ff0a5381502ab2d1e448d1d2e2c47fee0234182408472b5795b4d20a7736a9 | Triage

Submit
Reports

Overview

overview

Static

static

3

27ff0a5381...a9.exe

windows7-x64

27ff0a5381...a9.exe

windows10-2004-x64

Sharing

General

Target

27ff0a5381502ab2d1e448d1d2e2c47fee0234182408472b5795b4d20a7736a9
Size

664KB
Sample

240416-shs2gada98
MD5

fe52f8097c6a4096c6dd112f6ea5676d
SHA1

3dd2528f904745a7087d41f4ddc8c3d5e02a42fe
SHA256

27ff0a5381502ab2d1e448d1d2e2c47fee0234182408472b5795b4d20a7736a9
SHA512

2873366d68949dd9e7f056b32a5d8f2a02da663f001fa09bf3b3a613eba5c1e7d43ca56b97cb4101d7c7b4ebf16a9408b39d9aca007997cd383821a5b8acb9bd
SSDEEP

6144:8Z6ZA37ldV7aixUuxwtV0JbqCR3Gfz+8L0D2V:s37lb7aduxxmCutV

Score

10^/10

chinese_generic_botnet botnet

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

27ff0a5381502ab2d1e448d1d2e2c47fee0234182408472b5795b4d20a7736a9.exe

Resource

win7-20240221-en

chinese_generic_botnet botnet

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

27ff0a5381502ab2d1e448d1d2e2c47fee0234182408472b5795b4d20a7736a9.exe

Resource

win10v2004-20240412-en

chinese_generic_botnet botnet

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  27ff0a5381502ab2d1e448d1d2e2c47fee0234182408472b5795b4d20a7736a9
- Size
  
  664KB
- MD5
  
  fe52f8097c6a4096c6dd112f6ea5676d
- SHA1
  
  3dd2528f904745a7087d41f4ddc8c3d5e02a42fe
- SHA256
  
  27ff0a5381502ab2d1e448d1d2e2c47fee0234182408472b5795b4d20a7736a9
- SHA512
  
  2873366d68949dd9e7f056b32a5d8f2a02da663f001fa09bf3b3a613eba5c1e7d43ca56b97cb4101d7c7b4ebf16a9408b39d9aca007997cd383821a5b8acb9bd
- SSDEEP
  
  6144:8Z6ZA37ldV7aixUuxwtV0JbqCR3Gfz+8L0D2V:s37lb7aduxxmCutV
Score

10^/10

chinese_generic_botnet botnet
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnet

© 2018-2024

Terms | Privacy