Extracted

• • Target

    87bd0cd9c4229b043e22371de50e7e258f714805d4f1c94fbda15d152e0b12bd

  • Size

    212KB

  • MD5

    48826b528b049e4ae18150dd30f144ae

  • SHA1

    9eed9e9e1935d7178990bde0a4869e7d40f7f2b5

  • SHA256

    87bd0cd9c4229b043e22371de50e7e258f714805d4f1c94fbda15d152e0b12bd

  • SHA512

    278d09a57ebe0f9f5271626683a3d0bd0bf041c71edc0ffbc3e302ebdcdde28be69f91a60fa9923856ee045e0bbf02d02e612c019eea9195ce026251af94028d

  • SSDEEP

    1536:dNSXbc74YTOnlNSUL09atT0mBBA7aKSvIYFwAfdvotQO5N:dEo75OnPSI09qgmBBAGKSvwovot9

  Score

  10^/10

  persistence

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2