Extracted

• • Target

    f6c4f0408e40c0a5e9c79973454b3a3052e479ff150daa8c5c86feece7118990

  • Size

    45KB

  • MD5

    a5bad33dbecf5ef9b0cc5377fb46af48

  • SHA1

    27bdd667e7f4376c9f95c37a6bc8732dc308b922

  • SHA256

    f6c4f0408e40c0a5e9c79973454b3a3052e479ff150daa8c5c86feece7118990

  • SHA512

    bf0e78c3cc0fc5ca1e7ac7583479ab9e1f834f58ebf4845ee20f5ab52a7f1e2f93d0ec27532d6b022fa8aa616ac6e50bbbdcb73bd13f0ec4cdca87f49acdc39a

  • SSDEEP

    768:9qSqC8+N5ozQQencwxWmNXMX3cX8tcXmcX8/XrX8/uU9:9rqfzQQeamN88xjm7c79

  Score

  10^/10

  discovery

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2