b24de95a18c41cc29bd59f1162473a2b6963f407223ad9a0675747b34aa735af | Triage

Sharing

General

Target

b24de95a18c41cc29bd59f1162473a2b6963f407223ad9a0675747b34aa735af.exe
Size

465KB
Sample

241121-mqhb2ssarl
MD5

ca15457cc20a4cbec0829d4a6b0c605c
SHA1

5a67a4c01a1aecd189b3825a24d4214a97c4b0fe
SHA256

b24de95a18c41cc29bd59f1162473a2b6963f407223ad9a0675747b34aa735af
SHA512

31938f34f40b59d0b9e9b097bc611ea113cd8cd2908494fdbdc69537789438b65151c6300e8217e03ed0b00c425d5b7f4489998e06f82f07fcf0da5a285476f3
SSDEEP

6144:mBapC9DUIYmO5Kv5Q7X/l/rYvkW1VxxfnzrV9UAH0ctkPfc92F8XLpIh9jil1:5pQD+mO5KWy/zrVbt4fcYg9U9jI1

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b24de95a18c41cc29bd59f1162473a2b6963f407223ad9a0675747b34aa735af.exe
- Size
  
  465KB
- MD5
  
  ca15457cc20a4cbec0829d4a6b0c605c
- SHA1
  
  5a67a4c01a1aecd189b3825a24d4214a97c4b0fe
- SHA256
  
  b24de95a18c41cc29bd59f1162473a2b6963f407223ad9a0675747b34aa735af
- SHA512
  
  31938f34f40b59d0b9e9b097bc611ea113cd8cd2908494fdbdc69537789438b65151c6300e8217e03ed0b00c425d5b7f4489998e06f82f07fcf0da5a285476f3
- SSDEEP
  
  6144:mBapC9DUIYmO5Kv5Q7X/l/rYvkW1VxxfnzrV9UAH0ctkPfc92F8XLpIh9jil1:5pQD+mO5KWy/zrVbt4fcYg9U9jI1
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence