Extracted

• • Target

    8d557a73f900f33cf09ee75f9f69b0ba

  • Size

    621KB

  • MD5

    8d557a73f900f33cf09ee75f9f69b0ba

  • SHA1

    986e6e69aa0fa1e68128dee587b9bf3cf4c780c2

  • SHA256

    6f3b2c835726e2cf4eda147bdafbe0764bbb7502dfdc53d55f2f3d9e65071d51

  • SHA512

    8082c6811185c3634cd91e854bed91b772ca65082185fa6c99b63ed13891d4022c61c864e0dcd257c19f2d847f036b5cf9be2bd4a6ae66cdd632b7082e4b041e

  • SSDEEP

    12288:DFrXoPDc6TR74di5m7bZH1E8ADzdNMdQRe+/hRmpg3PCLMUfB9K:5ToPQER7Qom/ZHeDbMdWiLvfBY

  Score

  10^/10

  persistenceupx

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2