Overview

overview

10

Static

static

3

4cc1ab70e6...1b.exe

windows7-x64

10

4cc1ab70e6...1b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b36366f4a27987d6de47887b03f29c68.bin

  • Size

    746KB

  • Sample

    241020-b22z2stalq

  • MD5

    033dfb3f8ae89181a2e8d07028b60fe2

  • SHA1

    52262037fe00c587ad69101c28610392fd3a644e

  • SHA256

    b31c0f2d56beabcbd3d13284655e8c81915c8b83deb22450ff43019229f679a4

  • SHA512

    31d016de08448b916e678bc0a52d02b3d0b2a39a573098c95528ca5308c93ac18f9548d8bf262667576edfdff2086f1df328a2f7da21cfe54a761c6da4bf1476

  • SSDEEP

    12288:IGeSoriI5/zo9srZ7dlWldVShkMlgthXl/fz6S2KJbu00VjaR5rkgfV6GA29GPpf:JoriQMmZBlWldA9mrXl/fztxCVVjePDq

Score
10/10
chinese_generic_botnetbotnetdiscovery

Malware Config

Targets

    • Target

      4cc1ab70e6fd0d4441c778d40212c6e3114e14d56da85717214f8498e1c1501b.exe

    • Size

      940KB

    • MD5

      b36366f4a27987d6de47887b03f29c68

    • SHA1

      6f290bd6c132ec5c824558a29bdf75d25ced94e3

    • SHA256

      4cc1ab70e6fd0d4441c778d40212c6e3114e14d56da85717214f8498e1c1501b

    • SHA512

      a9441175872e88fc49482ef4707fad0e1f15a3ee1f4c74f3a2fafd3744968025d35ca61ed1905239a01df58511985e00708cdae7cb9acae4cca8b51032e02359

    • SSDEEP

      24576:q4bDOphvGTO5+L0Un5cOoaPaoWXqEinqg4dNMBlqD9:HD2n+H5cOoUao+vib4rMu

    Score
    10/10
    chinese_generic_botnetbotnetdiscovery

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet payload

      botnet

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks