General
- Target RadmirVPN.exe
- Size 101KB
- Sample260620-wgbbtags9p
- SHA256 f3df4849a5192348c1de5915498cbbd07bfddf6a491fd77ec8ef7eb67c6abae1
Score
8/10
Malware Config
Targets
-
- Target RadmirVPN.exe
- Size 101KB
- SHA256 f3df4849a5192348c1de5915498cbbd07bfddf6a491fd77ec8ef7eb67c6abae1
Score8/10-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL