chinese_generic_botnet | 69d7973f1002d543c7e1935b95a4493ec29d0c21d3dc5e50d2f477868a914f70 | Triage

Submit
Reports

Overview

overview

Static

static

3

db3634519c...18.exe

windows7-x64

db3634519c...18.exe

windows10-2004-x64

Sharing

General

Target

db3634519c2d504f67f0ac5518d4c208_JaffaCakes118
Size

312KB
Sample

241209-ycjhqsymav
MD5

db3634519c2d504f67f0ac5518d4c208
SHA1

752eaa1a95d1179ac825119d27c006ddeda41d6b
SHA256

69d7973f1002d543c7e1935b95a4493ec29d0c21d3dc5e50d2f477868a914f70
SHA512

3cca550e3fc9360f97b04c64172daface1e2a5f2b6508fc141f15214bf9e668a88e81ed487b40d926a944e0c71d35f2f97fb2066a66dfb4dab2f264410b6d751
SSDEEP

6144:JEeHlmxEW0qLFWfs/ZnGWvAljyyqI7rRgdixjTwa/RxJg:JTgTZWk/oWvARy9oRxHY

Score

10^/10

chinese_generic_botnet botnet discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

db3634519c2d504f67f0ac5518d4c208_JaffaCakes118.exe

Resource

win7-20240903-en

chinese_generic_botnet botnet discovery

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

db3634519c2d504f67f0ac5518d4c208_JaffaCakes118.exe

Resource

win10v2004-20241007-en

chinese_generic_botnet botnet discovery persistence

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  db3634519c2d504f67f0ac5518d4c208_JaffaCakes118
- Size
  
  312KB
- MD5
  
  db3634519c2d504f67f0ac5518d4c208
- SHA1
  
  752eaa1a95d1179ac825119d27c006ddeda41d6b
- SHA256
  
  69d7973f1002d543c7e1935b95a4493ec29d0c21d3dc5e50d2f477868a914f70
- SHA512
  
  3cca550e3fc9360f97b04c64172daface1e2a5f2b6508fc141f15214bf9e668a88e81ed487b40d926a944e0c71d35f2f97fb2066a66dfb4dab2f264410b6d751
- SSDEEP
  
  6144:JEeHlmxEW0qLFWfs/ZnGWvAljyyqI7rRgdixjTwa/RxJg:JTgTZWk/oWvARy9oRxHY
Score

10^/10

chinese_generic_botnet botnet discovery persistence
- Chinese_generic_botnet family
  chinese_generic_botnet
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetdiscovery

behavioral2

chinese_generic_botnetbotnetdiscoverypersistence

© 2018-2025

Terms | Privacy