Extracted

• • Target

    84a610254e46e447d232f0d97c422e1f6fd97d665fe6c1e796def08df9c7376c

  • Size

    188KB

  • MD5

    91ada9acce589aac0ae2b36a97063000

  • SHA1

    13674d244e87365f7f652ae1706a562f937e42cc

  • SHA256

    84a610254e46e447d232f0d97c422e1f6fd97d665fe6c1e796def08df9c7376c

  • SHA512

    f92c948d1fbb2a4eec33dcedcc43847ed86bd3c03de45ca3ee8e1e45d6e63257c90ed61ce557da7520c5621e37cfd614f075285d8737862c9f6e6ea53da2141d

  • SSDEEP

    1536:NvVQb4cLIkN+4Weat2RKLjWlC48Pp9JAcjrSrow0w:NvVQLIkLWeaA8KlCph9Grow0w

  Score

  10^/10

  persistence

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2