Extracted

• • Target

    TRX67456745.js

  • Size

    38KB

  • MD5

    2dcd12b27189b7ed0c9fa8e6bd9295fc

  • SHA1

    b7fcdef9fbe2a9fefbd2bb1619aa6abfb9689beb

  • SHA256

    30c70636d4cacb75b3ee872ee0923157a2df6ab48c3834d956b0beafb420ec77

  • SHA512

    ad6b5107b3b2c6cba0b2aa70712a607f67c128b40984e904aac81166af308519f5bb83e2ef0018b67e5480bc496122417b13b734e14e74ff983475faee92a1e2

  • SSDEEP

    384:bJVRkqsF/+8BbP26SrOEt1bQA9DK6FYJzuqig44QipqGWs0amp0+H59PKe0Z78Q+:bJ4quboOqbbFquqigqhsEPKe0Z78QTS

  Score

  10^/10

  persistence

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application

    persistence
  behavioral1behavioral2