Extracted

• • Target

    69309e7ccfcdd58d191622f6701853fb_JaffaCakes118

  • Size

    2.6MB

  • MD5

    69309e7ccfcdd58d191622f6701853fb

  • SHA1

    b0bc0d6164503604607b6add7c92b17830628632

  • SHA256

    4985a26e98836ea21b12dc9734060a16595cc182ef0aa9b0f859cd875d26f05a

  • SHA512

    1649970d2721e7662d14995f1a1a3ae1a31ef1a3d09345b7d30373eeb92464fc10cece85762ee6444a34bc94bc91036dc40f624516010b3b826026058b02c1d5

  • SSDEEP

    24576:avQnDQUMfHaSqFUPU29/Sjfx6qvrSdEI8W6L0a111I1110TTTYXXXjcA111KiO1D:4nHufvmdvLja111I1111111y111

  Score

  10^/10

  persistence

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2