Extracted

• • Target

    documents.lnk

  • Size

    1KB

  • MD5

    813dd41c91bb43332482ad5c0857a8d7

  • SHA1

    5dfa29b64941d86e05be9d99b881dec1fb8338f4

  • SHA256

    b953d0b1efb9719f79954788480235b8eccb84b13c5d373969fa3a03aabef788

  • SHA512

    72536d2787db0cef94aab6088865b5ddaf351330306ba860179a7dbe7a70ca9d6e9d8e88821e4078cbe9ad3e736c758f26758cf7e8a9df7dc12d76df6b124058

  Score

  7^/10

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2

• • Target

    sysmon64.exe

  • Size

    2.1MB

  • MD5

    774efb94ed852690c35d3d794a511638

  • SHA1

    e74e97ccf970176a86e1443d542a3558befc8f6f

  • SHA256

    82aeb5d0564557665ebff9d1ccef066336111de1be149eca12275f05085a2cd7

  • SHA512

    fd52d3efb6b101798e759cfb7e2ec12fec9e54344e2e920d99f137a90d1f80f0650516f4dcf33a0769ff222910e8bea9a2f58c32fba750d73eb0135fe6b9b970

  • SSDEEP

    49152:YaLMh74dfw5MKWe6yXdVgfRY8igxZPqPGETlsE:ysfWltGf5Lxd1ESE

  Score

  1^/10
  behavioral3behavioral4