chinese_generic_botnet | 14ae6f0c312155322d1af339f78179e9feff394bce60c7d51b7a6801f3f8d7dc | Triage

Submit
Reports

Overview

overview

Static

static

5

14ae6f0c31...dc.exe

windows7-x64

14ae6f0c31...dc.exe

windows10-2004-x64

Sharing

General

Target

14ae6f0c312155322d1af339f78179e9feff394bce60c7d51b7a6801f3f8d7dc
Size

386KB
Sample

241206-nar2zszqhl
MD5

7dc5ac82bb6ad9349aa264cf21b89f87
SHA1

61904ea7be46eaf3749136d4095b1f158b8d70aa
SHA256

14ae6f0c312155322d1af339f78179e9feff394bce60c7d51b7a6801f3f8d7dc
SHA512

6223155c9ef7b79077b2d6f83f28c89dfa2fc6c8bec2a8ba9dccd8f5718139ea243ca44d7af6cc1d1365ec6986521b3ad59b7a7b7c0f8232be707493390cac9a
SSDEEP

3072:N6h5LJ0Q0CJpiw1w1HoFN6WtljaJuloHs+dtE3KznO:N6h5LJ5TJgZ1HoFN6WtljaJul+pnE6j

Score

10^/10

chinese_generic_botnet botnet discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

14ae6f0c312155322d1af339f78179e9feff394bce60c7d51b7a6801f3f8d7dc.exe

Resource

win7-20240903-en

chinese_generic_botnet botnet discovery upx

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

14ae6f0c312155322d1af339f78179e9feff394bce60c7d51b7a6801f3f8d7dc.exe

Resource

win10v2004-20241007-en

chinese_generic_botnet botnet discovery persistence upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  14ae6f0c312155322d1af339f78179e9feff394bce60c7d51b7a6801f3f8d7dc
- Size
  
  386KB
- MD5
  
  7dc5ac82bb6ad9349aa264cf21b89f87
- SHA1
  
  61904ea7be46eaf3749136d4095b1f158b8d70aa
- SHA256
  
  14ae6f0c312155322d1af339f78179e9feff394bce60c7d51b7a6801f3f8d7dc
- SHA512
  
  6223155c9ef7b79077b2d6f83f28c89dfa2fc6c8bec2a8ba9dccd8f5718139ea243ca44d7af6cc1d1365ec6986521b3ad59b7a7b7c0f8232be707493390cac9a
- SSDEEP
  
  3072:N6h5LJ0Q0CJpiw1w1HoFN6WtljaJuloHs+dtE3KznO:N6h5LJ5TJgZ1HoFN6WtljaJul+pnE6j
Score

10^/10

chinese_generic_botnet botnet discovery upx persistence
- Chinese_generic_botnet family
  chinese_generic_botnet
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetdiscoveryupx

behavioral2

chinese_generic_botnetbotnetdiscoverypersistenceupx

© 2018-2025

Terms | Privacy