Overview

overview

7

Static

static

1

Roqwnrsun.exe

windows7-x64

6

Roqwnrsun.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Roqwnrsun.exe
  • Size 6KB
  • Sample230207-vfpblscg45
  • SHA256 dfa4b25bb9a1534192d30dc3f10acd6a72c21a36bfaecae14c5d7a22dff88fd5
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
collection

Malware Config

Targets

    • Target
      Roqwnrsun.exe
    • Size 6KB
    • SHA256 dfa4b25bb9a1534192d30dc3f10acd6a72c21a36bfaecae14c5d7a22dff88fd5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    collection

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks