[Intel]: https://asec.ahnlab.com/en/50316/

[timb-machine]

Area

Malware reports

Parent threat

Defense Evasion, Discovery, Command and Control, Impact

Finding

https://asec.ahnlab.com/en/50316/

Industry reference

attack:T1036.005:Match Legitimate Name or Location
attack:T1499:Endpoint Denial of Service
attack:T1082:System Information Discovery
attack:T1095:Non-Application Layer Protocol
uses:ProcessTreeSpoofing
uses:Non-persistentStorage
uses:RedirectionToNull

Malware reference

DDoSClient

Actor reference

ChinaZ

Component

Linux

Scenario

No response