Overview

overview

8

Static

static

1

Rxnpirn.js

windows7-x64

3

Rxnpirn.js

windows10-1703-x64

8

Rxnpirn.js

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Rxnpirn.js

  • Size

    192KB

  • Sample

    230510-v5tydsbb9z

  • MD5

    2ecc86611e6f29843a3028400ad8441c

  • SHA1

    68434b267a19112adfb9ee4c993ccc9ad6e22e81

  • SHA256

    7187d6426a63fd9005e016900312d9059350dade92d9656113048f2320a771f6

  • SHA512

    496871bca00e304db9cd6044fe53913ac12bb2a24bcb1815e34e5c5e28f2568f790764a0e97109da30d03ca8ca31c10ee9872ceddee3adc1f8ea90eab9008a86

  • SSDEEP

    3072:MBMZZWPoRY8dc0wL6LrP5yLlnmTSaq9KrloDHP/9n2liKhb4o:MGZZWQRY860wefP5yLVsH+n2liKhb4o

Score
8/10

Malware Config

Targets

    • Target

      Rxnpirn.js

    • Size

      192KB

    • MD5

      2ecc86611e6f29843a3028400ad8441c

    • SHA1

      68434b267a19112adfb9ee4c993ccc9ad6e22e81

    • SHA256

      7187d6426a63fd9005e016900312d9059350dade92d9656113048f2320a771f6

    • SHA512

      496871bca00e304db9cd6044fe53913ac12bb2a24bcb1815e34e5c5e28f2568f790764a0e97109da30d03ca8ca31c10ee9872ceddee3adc1f8ea90eab9008a86

    • SSDEEP

      3072:MBMZZWPoRY8dc0wL6LrP5yLlnmTSaq9KrloDHP/9n2liKhb4o:MGZZWQRY860wefP5yLVsH+n2liKhb4o

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v6

Tasks