Extracted

• • Target

    9d8a8805b397a5b60f3b05cf01c6271966d7537681477022a1486092baba507c

  • Size

    33KB

  • MD5

    8435f9a36d2531ba46887e676bd765c0

  • SHA1

    d5d5f2869a6eb6e3fc0858197fd1257b60fd249e

  • SHA256

    9d8a8805b397a5b60f3b05cf01c6271966d7537681477022a1486092baba507c

  • SHA512

    272e26aea6885b9bf43918ebac59a96fff8da190e18ddd6ce100843c89a8029830f6413c4ca98db073ebc3ac78a40c7c9175cda87a5c6e28cd0802fc9cb77a45

  • SSDEEP

    768:/rxC9JLnebmBnbxOy8eyRWPsW9sTpMJMu+/z:/oPLebgnbxPeGIpMJ07

  Score

  10^/10

  persistence

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application

    persistence
  behavioral1behavioral2