Extracted

• • Target

    3ffc211ce78796544ad9ad8726a59b981d7cec288eb17ff51e2e74bbf1d93dfb.lnk

  • Size

    59KB

  • MD5

    a93cb039d8b98e77656b11af495edd09

  • SHA1

    0c881101dcca67b960e51c3c42bb547a342731bd

  • SHA256

    3ffc211ce78796544ad9ad8726a59b981d7cec288eb17ff51e2e74bbf1d93dfb

  • SHA512

    f038ececae42f3f726e9d70db3d53986d6ad3d7806d9da8102938e22e87916349672f93e07a2797629bb595954d6e6a447bfc924bfb00cd4e269006240ba0f96

  • SSDEEP

    12:8MFm/3BVSXvk44X3ojsqzKtnWNUfW+UcCsvX1CKeXRpKWKDiN33YlNPeVnI:8l/BHYVKVWKe+/CWFC7hpgaHKPeFI

  Score

  10^/10

  evasiontrojan

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2