chinese_generic_botnet | 9f4f0a18aae3ebae5a22e110dba43ff447c0e9bb47f638a8dca5dd0f88158d17 | Triage

Submit
Reports

Overview

overview

Static

static

3

9f4f0a18aa...17.exe

windows7-x64

9f4f0a18aa...17.exe

windows10-2004-x64

Sharing

General

Target

9f4f0a18aae3ebae5a22e110dba43ff447c0e9bb47f638a8dca5dd0f88158d17
Size

1.4MB
Sample

240423-qmr9mage7z
MD5

ded2a9fcd21b689b87b7733bbd02d64f
SHA1

1cbbbd108fc649fac8b3a75b07ca62ce61363bd2
SHA256

9f4f0a18aae3ebae5a22e110dba43ff447c0e9bb47f638a8dca5dd0f88158d17
SHA512

a150976d2261e138ae99312b77f56bb7e16d06786416ef77d485deb223afd3218226c76069b44b881935b0aeb6e54e6e2230e435d4725543798192970d38c3a5
SSDEEP

24576:N37Z7Xxo1eg0vbe/42ii9pRQqvN2FqErdN:x9e1eg044zUpqq0

Score

10^/10

chinese_generic_botnet botnet

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

9f4f0a18aae3ebae5a22e110dba43ff447c0e9bb47f638a8dca5dd0f88158d17.exe

Resource

win7-20240221-en

chinese_generic_botnet botnet

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

9f4f0a18aae3ebae5a22e110dba43ff447c0e9bb47f638a8dca5dd0f88158d17.exe

Resource

win10v2004-20240412-en

chinese_generic_botnet botnet

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  9f4f0a18aae3ebae5a22e110dba43ff447c0e9bb47f638a8dca5dd0f88158d17
- Size
  
  1.4MB
- MD5
  
  ded2a9fcd21b689b87b7733bbd02d64f
- SHA1
  
  1cbbbd108fc649fac8b3a75b07ca62ce61363bd2
- SHA256
  
  9f4f0a18aae3ebae5a22e110dba43ff447c0e9bb47f638a8dca5dd0f88158d17
- SHA512
  
  a150976d2261e138ae99312b77f56bb7e16d06786416ef77d485deb223afd3218226c76069b44b881935b0aeb6e54e6e2230e435d4725543798192970d38c3a5
- SSDEEP
  
  24576:N37Z7Xxo1eg0vbe/42ii9pRQqvN2FqErdN:x9e1eg044zUpqq0
Score

10^/10

chinese_generic_botnet botnet
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnet

© 2018-2024

Terms | Privacy