Extracted

• • Target

    4b1286480a8560d1a1e9bc8dcd0b9a2fabc07a3f42f5388e1c3ffc168d5ffc97.exe

  • Size

    45KB

  • MD5

    0dd094ceff87bdd52472b25ba2422580

  • SHA1

    18944002f4d4d0ed4a466821b65c847354cc9d17

  • SHA256

    4b1286480a8560d1a1e9bc8dcd0b9a2fabc07a3f42f5388e1c3ffc168d5ffc97

  • SHA512

    a9fe5672464f9143204b953f2bae56a15bccce1660d55dda2694ac951df1128edaf86f6b7ddd7d2228b90c5ee484a8c3d56cc3e42a6f7bef247b4227c371f67e

  • SSDEEP

    768:zIP5WOMVs4PSV06ymNNC6S7Cm1n2OBGRIWNSE77NPQ1TTGfGYy6KT:zI0OGrOy6NvSpMZVQ1J4KT

  Score

  10^/10

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2