chinese_generic_botnet | d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5 | Triage

Sharing

General

Target

d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5
Size

432KB
Sample

241013-pf6b8s1bjk
MD5

fc7364fd9f7481fd91daaa0b8ed8a01a
SHA1

c527b85649737658670db8593ce4ffaeba4c1433
SHA256

d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5
SHA512

f3b6a507774e5d438f5cbcb4b474885d7bffe9221aab657f4e975358b9fb199af870f748e0c1a47d0d828696a620062e6ffdbed2a9fa798799aa1e69b8a153cb
SSDEEP

3072:PIKW6p/1PHoJzpjRIphEpKp4/zmbNIDa3SgvRO7ssjjd3DW20DOiaMCBHA:AY1/u/y5IDa3S2O7LlDQDOifQHA

Score

10^/10

chinese_generic_botnet botnet discovery persistence

Malware Config

Targets

- Target
  
  d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5
- Size
  
  432KB
- MD5
  
  fc7364fd9f7481fd91daaa0b8ed8a01a
- SHA1
  
  c527b85649737658670db8593ce4ffaeba4c1433
- SHA256
  
  d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5
- SHA512
  
  f3b6a507774e5d438f5cbcb4b474885d7bffe9221aab657f4e975358b9fb199af870f748e0c1a47d0d828696a620062e6ffdbed2a9fa798799aa1e69b8a153cb
- SSDEEP
  
  3072:PIKW6p/1PHoJzpjRIphEpKp4/zmbNIDa3SgvRO7ssjjd3DW20DOiaMCBHA:AY1/u/y5IDa3S2O7LlDQDOifQHA
Score

10^/10

chinese_generic_botnet botnet discovery persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetdiscovery

behavioral2

chinese_generic_botnetbotnetdiscoverypersistence