General
- Target Rsvp4u.scr
- Size 37.0MB
- Sample260722-pexcyahl5s
- SHA256 c6337bf009c941237540e7d38f9ef367a18c8001474c2628aacff0031dbe1cc1
Score
7/10
Malware Config
Targets
-
- Target Rsvp4u.scr
- Size 37.0MB
- SHA256 c6337bf009c941237540e7d38f9ef367a18c8001474c2628aacff0031dbe1cc1
Score7/10-
Modifies file permissions
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
File and Directory Permissions Modification
1Impair Defenses
1Disable or Modify System Firewall
1