General

  • Target
    R2RCA.cer
  • Size 795B
  • Sample260809-jq71xsbp7y
  • SHA256 01ac2c00831f13656d61ac5ce2bcc0d9364e769ce7f4196969ff360bfc5c581c
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      R2RCA.cer
    • Size 795B
    • SHA256 01ac2c00831f13656d61ac5ce2bcc0d9364e769ce7f4196969ff360bfc5c581c
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks