General
- Target Rust Family.exe
- Size 1.1MB
- Sample260528-bfe86aev6w
- SHA256 10d581e1edfa86346c6ce2309bd6e6eb78e2c46b5e40d11be8e5e3109e90e164
Score
8/10
Malware Config
Targets
-
- Target Rust Family.exe
- Size 1.1MB
- SHA256 10d581e1edfa86346c6ce2309bd6e6eb78e2c46b5e40d11be8e5e3109e90e164
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Drops file in System32 directory
-
Probable phishing domain
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
5System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1