Overview

overview

7

Static

static

3

Bug24.exe

windows7-x64

7

Bug24.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Bug24.exe

  • Size

    5.6MB

  • Sample

    241119-qx34waxdln

  • MD5

    cb37f386265bb3ff2cf8b3f2357d136c

  • SHA1

    9b9a9bc102dc8712b6ac353824e9eac9ff6447dc

  • SHA256

    575ee8bd597cf9c966f6709b06fa14ad9f1c68f409567a0d79251b444dbbfdad

  • SHA512

    d8e8572104ac3d1d6b682e74d9c4ed465a1348d5197dc0cb8196b3e7b4d8deff7615962e16272d5d2978a2bc94db5767dbe5391ad0130aa5085ff8fc2a75a772

  • SSDEEP

    98304:7kLcgAWVhsTh05DKGcVYv0rXH8YOym/+BhNxrHkOFGs1x55ljq:wtGTi1YVY8bHjOysehNpfxnO

Score
7/10
discovery

Malware Config

Targets

    • Target

      Bug24.exe

    • Size

      5.6MB

    • MD5

      cb37f386265bb3ff2cf8b3f2357d136c

    • SHA1

      9b9a9bc102dc8712b6ac353824e9eac9ff6447dc

    • SHA256

      575ee8bd597cf9c966f6709b06fa14ad9f1c68f409567a0d79251b444dbbfdad

    • SHA512

      d8e8572104ac3d1d6b682e74d9c4ed465a1348d5197dc0cb8196b3e7b4d8deff7615962e16272d5d2978a2bc94db5767dbe5391ad0130aa5085ff8fc2a75a772

    • SSDEEP

      98304:7kLcgAWVhsTh05DKGcVYv0rXH8YOym/+BhNxrHkOFGs1x55ljq:wtGTi1YVY8bHjOysehNpfxnO

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks