Extracted

• • Target

    Installer.msi

  • Size

    2.8MB

  • MD5

    cfd331366ba1aeec95b8a8df3daf6b24

  • SHA1

    bb8a2fba2fcd5a88345c320b41806d3cea611e63

  • SHA256

    ab9bd97e350f7131c358da0db0d78182e4b96790155b646dc773df96e317d5cd

  • SHA512

    269e0161ea1aaf7ebe0d59b340e2b68b3e6fffaf38eb4b4a7c5e26a82f1da738e20345c8e5b95418ec5211950f2a0ea297ea4d6f31a08cdc9549f5b62fef5471

  • SSDEEP

    49152:dphtaDfpLvY+PMg85nF9Brz2q2+5ZPsZAAQPN162wOR4UkrfF1OrEMBZX26PH2ca:nif9vYMor6qlAMlk

  Score

  10^/10

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory

  behavioral1behavioral2