General
- Target https://www.dropbox.com/scl/fi/dp71kvdtfql268usezgmw/Pixara.zip?rlkey=uz8k8bowosq21p9b1v7n5lg1o&st=ivjt28si&dl=1
- Sample260621-3pj29agy2s
Score
10/10
Malware Config
Targets
-
- Target https://www.dropbox.com/scl/fi/dp71kvdtfql268usezgmw/Pixara.zip?rlkey=uz8k8bowosq21p9b1v7n5lg1o&st=ivjt28si&dl=1
Score10/10Windows security bypass
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
Disables Task Manager via registry modification
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops startup file
Executes dropped EXE
Loads dropped DLL
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Ignore Process Interrupts
1Impair Defenses
2Disable or Modify Tools
2Modify Registry
1