chinese_generic_botnet | b6c410e2aa13dc37f1ff8c7a70bda551b72866bf31f38a7e1a93caaff71537a8 | Triage

Sharing

General

Target

b6c410e2aa13dc37f1ff8c7a70bda551b72866bf31f38a7e1a93caaff71537a8
Size

3.3MB
Sample

240531-qeg4paad54
MD5

74b7a044f7d030794199d591d6de2730
SHA1

39f9532920fb3386c9aefcfde557162eac4b241d
SHA256

b6c410e2aa13dc37f1ff8c7a70bda551b72866bf31f38a7e1a93caaff71537a8
SHA512

e37422d6981cb8d1c6802fe8f2ceeb8e93cfb079678221dd40d080b8a42ad2dfacab65d5bb2b19a9fef0de974df2b47c8528b48f06e13b36a25a260361b4b5d8
SSDEEP

49152:t/7ZQgxi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjCz:t/7ZDT0uDhEv4n4M

Score

10^/10

chinese_generic_botnet botnet persistence

Malware Config

Targets

- Target
  
  b6c410e2aa13dc37f1ff8c7a70bda551b72866bf31f38a7e1a93caaff71537a8
- Size
  
  3.3MB
- MD5
  
  74b7a044f7d030794199d591d6de2730
- SHA1
  
  39f9532920fb3386c9aefcfde557162eac4b241d
- SHA256
  
  b6c410e2aa13dc37f1ff8c7a70bda551b72866bf31f38a7e1a93caaff71537a8
- SHA512
  
  e37422d6981cb8d1c6802fe8f2ceeb8e93cfb079678221dd40d080b8a42ad2dfacab65d5bb2b19a9fef0de974df2b47c8528b48f06e13b36a25a260361b4b5d8
- SSDEEP
  
  49152:t/7ZQgxi03zDWi26fs2cWDAbcl7jkv4+9Ry4kjCz:t/7ZDT0uDhEv4n4M
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnet

behavioral2

chinese_generic_botnetbotnetpersistence