Extracted

• • Target

    75fbbde016bc886ed22feeb18e443d15b76717857861c23d8f6ac39778c66146

  • Size

    205KB

  • MD5

    019dd6b43e539bb7161ba0c9e43a43e0

  • SHA1

    e8b8a0cbdd33edcb915af4d881659fced66863b0

  • SHA256

    75fbbde016bc886ed22feeb18e443d15b76717857861c23d8f6ac39778c66146

  • SHA512

    6c7f411a92ea59635dcf95a3430cdfbfbe77634b7c5d58488eece1d18be8d3736cdea82e5f65eccfeb145a23c28ec7a94f7558a77e388d37e56cf6b448a99a16

  • SSDEEP

    3072:IVHgCc4xGvbwcU9KQ2BBAHmaPxiVoIb5EL:VCc4xGxWKQ2Bonxj

  Score

  10^/10

  persistence

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2