Extracted

• • Target

    4b820c28a160bef91abf97726120bda6

  • Size

    80KB

  • MD5

    4b820c28a160bef91abf97726120bda6

  • SHA1

    e956924ba00a4ea96763bb0d3acd67eeb497f710

  • SHA256

    168add12aefe41fe53363c44989dba520a0b0416f7472ed0b0d9b7b44c1a3643

  • SHA512

    7bb3da930c1cde4219be7c10e38135bd51b046e4e304949851dd80542362b463c0079aa641de3cfb705ef2915255c2e09c68b942745fc1a389e255490ef8933c

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/ol:59Ry98guHVBqqg2bcruzUHmLKeMMU7Gj

  Score

  10^/10

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2