Extracted

• • Target

    59d86b42cfa8a9a50c935de24c015986

  • Size

    79KB

  • MD5

    59d86b42cfa8a9a50c935de24c015986

  • SHA1

    b3c708724ac8f0a3d6e9c8ceb46dd172ff765e9f

  • SHA256

    87b1f1bbc5fa82ec20947907f62079d4e5f233f6f4f66cb89cee3038887c89d0

  • SHA512

    16602aeb4b2b6075150688744783e41062bef4f5ee870203876491a7b92023a6f10f60e50eb2d46dbea9cdb34344e226e0791038d05c9e6b7855f96b18d619c5

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/oX:59Ry98guHVBqqg2bcruzUHmLKeMMU7Gd

  Score

  10^/10

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2