Extracted

• • Target

    ac9268cb2641b313f7460ce40169e59b.exe

  • Size

    5KB

  • MD5

    ac9268cb2641b313f7460ce40169e59b

  • SHA1

    e32b781c7d15cd0e1354edd4e488e2750706e278

  • SHA256

    d3aceee88f292e6bc52b4fe8eb9de669fe612e62ed4717ef05aaaf6eea29c569

  • SHA512

    7b31c764279a959830c02a65fad81a1bcbfb8e41a6c00dcc8d68a0d6b925d782c73b8474f3e9ed1ec6e31801400886136dca459956e9201c45e83ad14c41d41f

  • SSDEEP

    96:vfycZ+ALBd3vJEtPsCZIB2oPRGHzb7v1JydcRxN:ny2tLHR4sCOD8HD117N

  Score

  10^/10

  persistenceupx

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Adds Run key to start application

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2