Overview

overview

10

Static

static

3

d22901f208...d5.exe

windows7-x64

10

d22901f208...d5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5

  • Size

    432KB

  • Sample

    241013-phwktawdja

  • MD5

    fc7364fd9f7481fd91daaa0b8ed8a01a

  • SHA1

    c527b85649737658670db8593ce4ffaeba4c1433

  • SHA256

    d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5

  • SHA512

    f3b6a507774e5d438f5cbcb4b474885d7bffe9221aab657f4e975358b9fb199af870f748e0c1a47d0d828696a620062e6ffdbed2a9fa798799aa1e69b8a153cb

  • SSDEEP

    3072:PIKW6p/1PHoJzpjRIphEpKp4/zmbNIDa3SgvRO7ssjjd3DW20DOiaMCBHA:AY1/u/y5IDa3S2O7LlDQDOifQHA

Score
10/10
chinese_generic_botnetbotnetdiscoverypersistence

Malware Config

Targets

    • Target

      d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5

    • Size

      432KB

    • MD5

      fc7364fd9f7481fd91daaa0b8ed8a01a

    • SHA1

      c527b85649737658670db8593ce4ffaeba4c1433

    • SHA256

      d22901f208e3a3e64b15b38fb60cb9301b769c7aff32efc5609691545ef42dd5

    • SHA512

      f3b6a507774e5d438f5cbcb4b474885d7bffe9221aab657f4e975358b9fb199af870f748e0c1a47d0d828696a620062e6ffdbed2a9fa798799aa1e69b8a153cb

    • SSDEEP

      3072:PIKW6p/1PHoJzpjRIphEpKp4/zmbNIDa3SgvRO7ssjjd3DW20DOiaMCBHA:AY1/u/y5IDa3S2O7LlDQDOifQHA

    Score
    10/10
    chinese_generic_botnetbotnetdiscoverypersistence

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet payload

      botnet

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks