Extracted

Extracted

• • Target

    3199683_4229061_rechnung.js

  • Size

    28KB

  • MD5

    bcbecbffd44fe370c09c287c4e5bf468

  • SHA1

    cc2293c8a147b27cd16eb01a35367cf5390c2292

  • SHA256

    b1e216ae1f56cc54120fa85b9ddbcf263b20bd113f8a3c3950ba7e8ffa7dbd6e

  • SHA512

    a13e88fde5eb2e640fe2ee366a18392cde117a9ab620ff28a99ff04c88ad3c70061419bef62897d7152bd2d1f87ef11743932626b95f3f10d5cc3c1573ec0adf

  • SSDEEP

    384:9/qm/IlGvFj+Rqa/tHF3kAfve90G32nG0qvqfZF9Y0mSydnj2Uf:YzCY1Hd5+9f3mOvu3YHKY

  Score

  10^/10

  persistence

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application

    persistence
  behavioral1behavioral2