Extracted

• • Target

    c65c1328067bede0230b150318c41eb9a756436ccbb4b714f8e36532ec101721

  • Size

    188KB

  • MD5

    335f407938eb2f8fc6bc6bf0d2e7df60

  • SHA1

    8444dd3562c1a37cd3a0939c82358b2c9936107e

  • SHA256

    c65c1328067bede0230b150318c41eb9a756436ccbb4b714f8e36532ec101721

  • SHA512

    d0dffd2702d55ef2a58c3b958437d1400d8552174252130789c79a342fe0c4d8b0c2ccf28908c05597740c5df6099708ab0610a1c0b8d1649db9b9b5f5230ba5

  • SSDEEP

    1536:/vVQb4cLIkN+4Weat2RKLjWlC48Pp9JAcj6Srow0f:/vVQLIkLWeaA8KlCph97row0f

  Score

  10^/10

  persistence

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2