Extracted

• • Target

    b8246260c03372bf7b2b17acb57aa868

  • Size

    686KB

  • MD5

    b8246260c03372bf7b2b17acb57aa868

  • SHA1

    26a0753a1a75f4c252fb913e0984c6cd7b1b8175

  • SHA256

    fd7009adb7b014f3b9c6bb2160e045fa50a0209681c7b59a2f1e68702f9345d7

  • SHA512

    86b1cec1e6fb4dd76a4bdf63c43eecadc7f5a0ad4e31f36c5c5fb3cadeec849a004199998c7a27ee30e36eb74ed6199c8c1835cb198318f57fd15cbaf9774747

  • SSDEEP

    12288:iMm+m65MXsAGBLUc2k+CR/rvNKOHGiv1haSevAXFzmm388fw8a:5B55McAUf7NKO7j5IYfa

  Score

  10^/10

  persistenceupx

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2