Extracted

• • Target

    b5b013ec5d0dbddbede09e66381c9bf6efa9b24fb300bf9a81319a6a7db50e4f

  • Size

    203KB

  • MD5

    10f9749d7883acca48a3a58a5a63ed42

  • SHA1

    143a08e1c255be63ae0405bb52de8c0fc4ff1216

  • SHA256

    b5b013ec5d0dbddbede09e66381c9bf6efa9b24fb300bf9a81319a6a7db50e4f

  • SHA512

    e3dde01d83330e324f2bc9f55d68085ec7549e02d8dcde51e35e336a0b6ff9d5770deaf96f7e9122b32494781d7a2c2aa3ed40ac989b3017fa8917ba9d8b0532

  • SSDEEP

    1536:sekrAoF5B366VanFEfGHo7P1gpuFz28YyGoIFC2R:seaF5Bq6gn2/P1gpuFzOoIh

  Score

  10^/10

  persistence

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2