General

  • Target
    https://cdn.discordapp.com/attachments/1561054721899503687/1561055020252667974/Rubox.exe?ex=6ad4f547&is=6ad3a3c7&hm=a4caac9ec401c1b50ab1e04721ba8e5cfa787cb4eeb91ccbef4bcd34f3caac9f&
  • Sample261017-vqs3jsas7m
Score
8/10

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1561054721899503687/1561055020252667974/Rubox.exe?ex=6ad4f547&is=6ad3a3c7&hm=a4caac9ec401c1b50ab1e04721ba8e5cfa787cb4eeb91ccbef4bcd34f3caac9f&
    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks