General

  • Target

    d24dee95e3a97ae5715108594d4256ba4b177b7204580141795104c2d1c9386c

  • Size

    1.8MB

  • Sample

    240602-rwxq5sfe79

  • MD5

    9762316a2ae09f9d49f6939797134cfe

  • SHA1

    3f56aa1e0c51623e2d987e059371ffd4ed2898e7

  • SHA256

    d24dee95e3a97ae5715108594d4256ba4b177b7204580141795104c2d1c9386c

  • SHA512

    71e4bd25f145cc5d157bbbb708bed203a9bc3cc42cfab6c98cd7030aa5d378d710c1287bba566fbb3eedec54244fb2caf963d53634b13e0024595016dd7613bf

  • SSDEEP

    24576:Tfc9CZz6Z5LFSZWSb05+RsR2QymNoO9A6UfmzkZF5IyPQjQhTyzCN:UCZWZ5MZWimbOMpCN

Malware Config

Targets

    • Target

      d24dee95e3a97ae5715108594d4256ba4b177b7204580141795104c2d1c9386c

    • Size

      1.8MB

    • MD5

      9762316a2ae09f9d49f6939797134cfe

    • SHA1

      3f56aa1e0c51623e2d987e059371ffd4ed2898e7

    • SHA256

      d24dee95e3a97ae5715108594d4256ba4b177b7204580141795104c2d1c9386c

    • SHA512

      71e4bd25f145cc5d157bbbb708bed203a9bc3cc42cfab6c98cd7030aa5d378d710c1287bba566fbb3eedec54244fb2caf963d53634b13e0024595016dd7613bf

    • SSDEEP

      24576:Tfc9CZz6Z5LFSZWSb05+RsR2QymNoO9A6UfmzkZF5IyPQjQhTyzCN:UCZWZ5MZWimbOMpCN

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

    • Chinese Botnet payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks