chinese_generic_botnet | 6a10df7423dc6bcc1f624a9716f3e713fdefba6f2f1b8d5e416b18c3d0105768 | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-04-21...id.exe

windows10-2004-x64

2026-04-21...id.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-21_b858bcc3a3096a7c633766b8a377fd9d_amadey_elex_emotet_glassworm_icedid
Size 2.0MB
Sample260421-hm885sdv71
SHA256 6a10df7423dc6bcc1f624a9716f3e713fdefba6f2f1b8d5e416b18c3d0105768
MD5 b858bcc3a3096a7c633766b8a377fd9d
SHA1 4bef418a833c947f965e9641d5506d1bd54d1eb3
SHA512 3b6cf82fc651fd501340e413bd2402f58dff7a898aaf6d135c3ffd34236ec5ef7c6cbf7b8a71659bd1306c445e1fd038bd7d9483a1e04f1eddd5be1452bd1f93
SSDEEP 49152:wnIAkIgWNGlsEdkc6CZQHCGwhon3LGHk9Kcpy2mjtU:KkIpEp6tHCGwGn3LGMKcpN
TLSH
T1FEA57C526E8E0470F6E26930563F3775913B7D206BF084C7D698BA9AAA317D1A73430F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

chinese_generic_botnet botnet discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-04-21_b858bcc3a3096a7c633766b8a377fd9d_amadey_elex_emotet_glassworm_icedid.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

150 seconds

botnet discovery chinese_generic_botnet persistence

Behavioral task

behavioral2

Sample

2026-04-21_b858bcc3a3096a7c633766b8a377fd9d_amadey_elex_emotet_glassworm_icedid.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

150 seconds

botnet discovery chinese_generic_botnet persistence

Malware Config

Targets

- Target
  2026-04-21_b858bcc3a3096a7c633766b8a377fd9d_amadey_elex_emotet_glassworm_icedid
- Size 2.0MB
- SHA256 6a10df7423dc6bcc1f624a9716f3e713fdefba6f2f1b8d5e416b18c3d0105768
- MD5 b858bcc3a3096a7c633766b8a377fd9d
- SHA1 4bef418a833c947f965e9641d5506d1bd54d1eb3
- SHA512 3b6cf82fc651fd501340e413bd2402f58dff7a898aaf6d135c3ffd34236ec5ef7c6cbf7b8a71659bd1306c445e1fd038bd7d9483a1e04f1eddd5be1452bd1f93
- SSDEEP 49152:wnIAkIgWNGlsEdkc6CZQHCGwhon3LGHk9Kcpy2mjtU:KkIpEp6tHCGwGn3LGMKcpN
- TLSH
  T1FEA57C526E8E0470F6E26930563F3775913B7D206BF084C7D698BA9AAA317D1A73430F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

botnet discovery chinese_generic_botnet persistence
- Family: Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

botnetdiscoverychinese_generic_botnetpersistence

behavioral2

botnetdiscoverychinese_generic_botnetpersistence

© 2018-2026

Terms | Privacy