chinese_generic_botnet | a75413ffa54a1d7b8a8f4e512a5c03a8f544fc23e2e9c719418374d1851c164a | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-04-20...ry.exe

windows10-2004-x64

2026-04-20...ry.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-20_2cb41d5a493052c907285c8ee3276aac_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader_wannacry
Size 3.4MB
Sample260420-jpm95act2l
SHA256 a75413ffa54a1d7b8a8f4e512a5c03a8f544fc23e2e9c719418374d1851c164a
MD5 2cb41d5a493052c907285c8ee3276aac
SHA1 c3b52eda217124ce0f627367fc1131892a65b398
SHA512 f7b8d4ffd1f353752c85b9908f377ec1b7ded55b7ed325fd43a192d7d6f49a185853910306cf1f55dd6ad002791f048448aff27ef81ef07abdabfea7a2de1c8c
SSDEEP 49152:7CcpdxGJLphTZEDztKZjIrXW0JteEwopCaTYH5JcsJHu/o6X5+8g+oh5Gc+FkJjo:7VpGJdhTStyjaXWw7cH5Jh4oKUn+oh4
TLSH
T11CF58D00B795407DCD9A21345B0D763A687EA6601B65F8D3F35079E6AC30AC1AB36F8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

chinese_generic_botnet botnet discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-04-20_2cb41d5a493052c907285c8ee3276aac_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader_wannacry.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

150 seconds

botnet discovery chinese_generic_botnet persistence

Behavioral task

behavioral2

Sample

2026-04-20_2cb41d5a493052c907285c8ee3276aac_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader_wannacry.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

150 seconds

botnet discovery chinese_generic_botnet persistence

Malware Config

Targets

- Target
  2026-04-20_2cb41d5a493052c907285c8ee3276aac_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader_wannacry
- Size 3.4MB
- SHA256 a75413ffa54a1d7b8a8f4e512a5c03a8f544fc23e2e9c719418374d1851c164a
- MD5 2cb41d5a493052c907285c8ee3276aac
- SHA1 c3b52eda217124ce0f627367fc1131892a65b398
- SHA512 f7b8d4ffd1f353752c85b9908f377ec1b7ded55b7ed325fd43a192d7d6f49a185853910306cf1f55dd6ad002791f048448aff27ef81ef07abdabfea7a2de1c8c
- SSDEEP 49152:7CcpdxGJLphTZEDztKZjIrXW0JteEwopCaTYH5JcsJHu/o6X5+8g+oh5Gc+FkJjo:7VpGJdhTStyjaXWw7cH5Jh4oKUn+oh4
- TLSH
  T11CF58D00B795407DCD9A21345B0D763A687EA6601B65F8D3F35079E6AC30AC1AB36F8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

botnet discovery chinese_generic_botnet persistence
- Family: Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

botnetdiscoverychinese_generic_botnetpersistence

behavioral2

botnetdiscoverychinese_generic_botnetpersistence

© 2018-2026

Terms | Privacy